Cisco's internal security review of the Catalyst SD-WAN product uncovered multiple vulnerabilities, including CVE-2026-20310, related to improper link resolution before file access (CWE-59). The vulnerabilities were discovered internally by the Cisco Catalyst SD-WAN engineering team as part of a proactive security and product quality initiative. Software hardening releases have been issued to address the identified weaknesses. The CWE-59 classification indicates risks associated with symlink or path traversal-type file access issues. Cisco published an advisory through its Security Center to inform customers and provide remediation guidance. No external exploitation or active threat actor involvement has been mentioned in the advisory.