Skip to content
OpenAdvisories
High WID-SEC-2026-1540 3 CVEs

Cisco Catalyst SD-WAN Manager: Mehrere Schwachstellen

Published May 14, 2026 · Updated May 14, 2026 · de-DE

Vendor: Cisco Product: Catalyst SD-WAN Manager

Summary

Ein Angreifer kann mehrere Schwachstellen in Cisco Catalyst SD-WAN Manager ausnutzen, um seine Privilegien zu erhöhen, und um Informationen offenzulegen.

Product

Cisco Catalyst SD-WAN ist eine Netzwerklösung, die Software-definierte Wide-Area-Networking-Funktionen (SD-WAN) mit Cisco Catalyst Series Switches kombiniert, um die Netzwerkleistung an verteilten Standorten zu optimieren und zu sichern.

Vulnerabilities 3

  • High 8.6
    CVE-2026-20224 Public exploit

    Cisco Catalyst SD-WAN Manager XML External Entity Injection Vulnerability

    A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenticated, remote attacker to read arbitrary files that are stored in an affected system. The attacker does not need to have valid user credentials. …

    Cisco Cisco Catalyst SD-WAN Manager Network devices
  • Medium 5.4
    CVE-2026-20209

    Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability

    A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker with read-only permissions to elevate their privileges from low to high and perform actions as a high-privileged user. This …

    Cisco Cisco Catalyst SD-WAN Manager Network devices
  • Medium 5.4
    CVE-2026-20210

    Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability

    A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker with read-only permissions to modify configurations and perform unauthorized actions on an affected system. This vulnerabili…

    Cisco Cisco Catalyst SD-WAN Manager Network devices

Revision history

  1. #1

    Initiale Fassung

References