Skip to content
OpenAdvisories

Product · Cisco

Cisco Catalyst SD-WAN Manager

46 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-76504 Exploited Public exploit EPSS 39%

    Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability

    A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user. This vulnerability is due to improper handling …

    Cisco Cisco Catalyst SD-WAN Manager Network devices
    KEV Sep 30, 2026
  • Medium 6.5
    CVE-2026-20262 Exploited Public exploit EPSS 29%

    Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability

    A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker to create a file or overwrite any file on the filesystem of an affected system. This vulnerability exists because the affect…

    Cisco Cisco Catalyst SD-WAN Manager Network devices
    KEV Jun 15, 2026
  • High 7.8
    CVE-2026-20245 Exploited Public exploit EPSS 25%

    Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation Vulnerability

    A vulnerability in the CLI of Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an authenticated, local attacker to execute…

    Cisco Cisco Catalyst SD-WAN Manager Cisco Catalyst SD-WAN Controller Network devices
    KEV Jun 9, 2026
  • Critical 10.0
    CVE-2026-20182 Exploited Public exploit EPSS 91%

    Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

    May 2026: This security advisory provides the details and fix information for a vulnerability that was discovered and fixed after the was disclosed in February 2026. This new advisory is for a new vulnerability in the control connection handshaking. The secti…

    Cisco Cisco Catalyst SD-WAN Manager Cisco Catalyst SD-WAN Controller Network devices
    KEV May 14, 2026
  • Medium 5.4
    CVE-2026-20122 Exploited EPSS 26%

    Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability

    A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite arbitrary files on the local file system. To exploit this vulnerability, the attacker must have valid read-only credentials with API access …

    Cisco Cisco Catalyst SD-WAN Manager Network devices
    KEV Apr 20, 2026
  • Critical 10.0
    CVE-2026-20127 Exploited Public exploit EPSS 88%

    Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

    A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an unauthenticated, remo…

    Cisco Cisco Catalyst SD-WAN Manager Network devices
    KEV Feb 25, 2026
  • High 7.5
    CVE-2026-20128 Exploited

    Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability

    A vulnerability in the Data Collection Agent (DCA) feature of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain DCA user privileges on an affected system. This vulnerability is due to the presence of a credential file for t…

    Cisco Cisco Catalyst SD-WAN Manager Network devices
    KEV Apr 20, 2026
  • Medium 6.5
    CVE-2026-20133 Exploited EPSS 35%

    A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive inf…

    Cisco Cisco Catalyst SD-WAN Manager Network devices
    KEV Apr 20, 2026
  • High 7.8
    CVE-2022-20775 Exploited EPSS 12%

    Cisco SD-WAN Software Privilege Escalation Vulnerability

    A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. This vulnerability is due to improper access controls on commands within the application CLI. An attacker could exploit this vulnerab…

    Cisco Cisco Catalyst SD-WAN Manager Cisco SD-WAN vEdge Router Cisco SD-WAN vEdge Cloud Network devices
    KEV Feb 25, 2026