CVE-2026-20191: Cisco Catalyst Center Arbitrary File Read Vulnerability
Cisco · Cisco Catalyst Center
No fix listed · Affected: Cisco Catalyst Center · Exploitation: not established
ExploitationNot established
Not in CISA KEV as of catalogue 2026.11.13 (13 Nov)
- In CISA KEV: not seen
- Exploited (reported): not seen
- Scanning observed: not seen
- Proof of concept public: not seen
- Not establishedNothing in the sources we check
Higher than 51% of scored CVEs
DescriptionNVD
A vulnerability in Cisco Catalyst Center could allow an unauthenticated, remote attacker to read arbitrary files from a restricted container. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to read arbitrary files from a restricted container of the affected device.
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 2 Jul.
- Cisco Patches Catalyst Center File Read Flaw and Seven ClamAV DoS BugsSecurityOnline · first in our coverage
New articles also arrive in the RSS feed.