# Cisco Catalyst SD-WAN Manager.

Every CVE that names Cisco Catalyst SD-WAN Manager among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-76504.md)
  `CVE-2026-76504` · CVE record: Cisco Cisco Catalyst SD-WAN Manager · CVSS 9.8 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.39 · Not analysed yet · Published 30 Sept 2026 · Tags: CWE-177
- [Cisco Catalyst SD-WAN Security Hardening Release - Memory Corruption Vulnerabilities](https://agentprime.io/advisories/CVE-2026-20313.md)
  `CVE-2026-20313` · CVE record: Cisco Cisco Catalyst SD-WAN Controller and 1 more · CVSS 7.7 High · Not analysed yet · Published 5 Aug 2026 · Tags: CWE-1284
- [Cisco Catalyst SD-WAN Security Hardening Release - Information Disclosure Vulnerabilities](https://agentprime.io/advisories/CVE-2026-20312.md)
  `CVE-2026-20312` · CVE record: Cisco Cisco Catalyst SD-WAN Controller and 1 more · CVSS 8.8 High · Not analysed yet · Published 5 Aug 2026 · Tags: Information disclosure
- [Cisco SD-WAN Software Security Hardening Release - Improper Link Resolution Before File Access](https://agentprime.io/advisories/CVE-2026-20310.md)
  `CVE-2026-20310` · CVE record: Cisco Cisco Catalyst SD-WAN Controller and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Aug 2026 · Tags: Path traversal
- [Cisco Catalyst SD-WAN Security Hardening Release - Input Validation Vulnerabilities](https://agentprime.io/advisories/CVE-2026-20303.md)
  `CVE-2026-20303` · CVE record: Cisco Cisco Catalyst SD-WAN Controller and 1 more · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Aug 2026 · Tags: CWE-20
- [Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-20294.md)
  `CVE-2026-20294` · CVE record: Cisco Cisco Catalyst SD-WAN Manager · CVSS 6.5 Medium · Not analysed yet · Published 5 Aug 2026 · Tags: Weak cryptography or TLS
- [Cisco Catalyst SD-WAN Security Hardening Release - Access Control Vulnerabilities](https://agentprime.io/advisories/CVE-2026-20304.md)
  `CVE-2026-20304` · CVE record: Cisco Cisco Catalyst SD-WAN Controller and 1 more · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Aug 2026 · Tags: Broken access control
- [Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability](https://agentprime.io/advisories/CVE-2026-20262.md)
  `CVE-2026-20262` · CVE record: Cisco Cisco Catalyst SD-WAN Manager · CVSS 6.5 Medium · Critical (KEV) · In CISA KEV · EPSS 0.29 · Not analysed yet · Published 15 Jun 2026 · Tags: Path traversal
- [Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2026-20245.md)
  `CVE-2026-20245` · CVE record: Cisco Cisco Catalyst SD-WAN Controller and 1 more · CVSS 7.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.25 · Not analysed yet · Published 4 Jun 2026 · Tags: CWE-116
- [Cisco Catalyst SD-WAN Manager XML External Entity Injection Vulnerability](https://agentprime.io/advisories/CVE-2026-20224.md)
  `CVE-2026-20224` · CVE record: Cisco Cisco Catalyst SD-WAN Manager · CVSS 8.6 High · Not analysed yet · Published 14 May 2026 · Tags: CWE-20
- [Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2026-20210.md)
  `CVE-2026-20210` · CVE record: Cisco Cisco Catalyst SD-WAN Manager · CVSS 5.4 Medium · Not analysed yet · Published 14 May 2026 · Tags: CWE-779
- [Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2026-20209.md)
  `CVE-2026-20209` · CVE record: Cisco Cisco Catalyst SD-WAN Manager · CVSS 5.4 Medium · Not analysed yet · Published 14 May 2026 · Tags: CWE-779
- [Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-20182.md)
  `CVE-2026-20182` · CVE record: Cisco Cisco Catalyst SD-WAN Controller and 1 more · CVSS 10.0 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.92 · Not analysed yet · Published 14 May 2026 · Tags: Authentication bypass
- [Cross-site scripting in Cisco Catalyst SD-WAN Manager](https://agentprime.io/advisories/CVE-2026-20108.md)
  `CVE-2026-20108` · CVE record: Cisco Cisco Catalyst SD-WAN Manager · CVSS 5.4 Medium · Not analysed yet · Published 25 Mar 2026 · Tags: Cross-site scripting (XSS)
- [Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability](https://agentprime.io/advisories/CVE-2026-20122.md)
  `CVE-2026-20122` · CVE record: Cisco Cisco Catalyst SD-WAN Manager · CVSS 5.4 Medium · Critical (KEV) · In CISA KEV · EPSS 0.26 · Not analysed yet · Published 25 Feb 2026 · Tags: CWE-648
- [Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-20127.md)
  `CVE-2026-20127` · CVE record: Cisco Cisco Catalyst SD-WAN Manager · CVSS 10.0 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.88 · Not analysed yet · Published 25 Feb 2026 · Tags: Authentication bypass
- [Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-20128.md)
  `CVE-2026-20128` · CVE record: Cisco Cisco Catalyst SD-WAN Manager · CVSS 7.5 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 25 Feb 2026 · Tags: CWE-257
- [Cisco Catayst SD-WAN Authentication Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-20129.md)
  `CVE-2026-20129` · CVE record: Cisco Cisco Catalyst SD-WAN Manager · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Feb 2026 · Tags: Authentication bypass
- [Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2026-20126.md)
  `CVE-2026-20126` · CVE record: Cisco Cisco Catalyst SD-WAN Manager · CVSS 8.8 High · Not analysed yet · Published 25 Feb 2026 · Tags: CWE-648
- [Information disclosure in Cisco Catalyst SD-WAN Manager](https://agentprime.io/advisories/CVE-2026-20133.md)
  `CVE-2026-20133` · CVE record: Cisco Cisco Catalyst SD-WAN Manager · CVSS 6.5 Medium · Critical (KEV) · In CISA KEV · EPSS 0.35 · Not analysed yet · Published 25 Feb 2026 · Tags: Information disclosure
- [Cisco SD-WAN vManage Stored Cross-Site Scripting Vulnerability](https://agentprime.io/advisories/CVE-2025-20147.md)
  `CVE-2025-20147` · CVE record: Cisco Cisco Catalyst SD-WAN Manager · CVSS 5.4 Medium · Not analysed yet · Published 7 May 2025 · Tags: Cross-site scripting (XSS)
- [Cisco Catalyst SD-WAN Manager Reflected HTML Injection Vulnerability](https://agentprime.io/advisories/CVE-2025-20216.md)
  `CVE-2025-20216` · CVE record: Cisco Cisco Catalyst SD-WAN Manager · CVSS 4.7 Medium · Not analysed yet · Published 7 May 2025 · Tags: Other injection
- [Cisco SD-WAN Manager Software Arbitrary File Creation Vulnerability](https://agentprime.io/advisories/CVE-2025-20187.md)
  `CVE-2025-20187` · CVE record: Cisco Cisco Catalyst SD-WAN Manager · CVSS 6.5 Medium · Not analysed yet · Published 7 May 2025 · Tags: Path traversal
- [Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2025-20122.md)
  `CVE-2025-20122` · CVE record: Cisco Cisco Catalyst SD-WAN Manager · CVSS 7.8 High · Not analysed yet · Published 7 May 2025 · Tags: CWE-300
- [Cisco Catalyst SDWAN Manager Arbitrary File Overwrite Vulnerability](https://agentprime.io/advisories/CVE-2025-20213.md)
  `CVE-2025-20213` · CVE record: Cisco Cisco Catalyst SD-WAN Manager · CVSS 5.5 Medium · Not analysed yet · Published 7 May 2025 · Tags: Command injection
- [Cisco Catalyst vManage Certificate Validation Vulnerability](https://agentprime.io/advisories/CVE-2025-20157.md)
  `CVE-2025-20157` · CVE record: Cisco Cisco Catalyst SD-WAN Manager · CVSS 5.9 Medium · Not analysed yet · Published 7 May 2025 · Tags: Weak cryptography or TLS
- [Cisco SD-WAN vManage Software XML External Entity Vulnerability](https://agentprime.io/advisories/CVE-2020-26066.md)
  `CVE-2020-26066` · CVE record: Cisco Cisco Catalyst SD-WAN Manager · CVSS 6.5 Medium · Not analysed yet · Published 18 Nov 2024 · Tags: XML external entities (XXE)
- [Cisco SD-WAN vEdge Arbitrary File Creation Vulnerability](https://agentprime.io/advisories/CVE-2020-26071.md)
  `CVE-2020-26071` · CVE record: Cisco Cisco Catalyst SD-WAN Manager and 3 more · CVSS 8.4 High · Not analysed yet · Published 18 Nov 2024 · Tags: Path traversal
- [Cisco SD-WAN vManage Directory Traversal Vulnerability](https://agentprime.io/advisories/CVE-2020-26073.md)
  `CVE-2020-26073` · CVE record: Cisco Cisco Catalyst SD-WAN Manager · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.13 · Not analysed yet · Published 18 Nov 2024 · Tags: Path traversal
- [Cisco SD-WAN vManage Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2020-26074.md)
  `CVE-2020-26074` · CVE record: Cisco Cisco Catalyst SD-WAN Manager · CVSS 7.8 High · Not analysed yet · Published 18 Nov 2024 · Tags: Privilege escalation
- [Cisco SD-WAN vManage Information Disclosure Vulnerabilities](https://agentprime.io/advisories/CVE-2021-1234.md)
  `CVE-2021-1234` · CVE record: Cisco Cisco Catalyst SD-WAN Manager · CVSS 5.3 Medium · Not analysed yet · Published 18 Nov 2024 · Tags: Information disclosure
- [Cisco SD-WAN vManage Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2021-1232.md)
  `CVE-2021-1232` · CVE record: Cisco Cisco Catalyst SD-WAN Manager · CVSS 6.5 Medium · Not analysed yet · Published 18 Nov 2024 · Tags: Hard-coded credentials
- [Cisco SD-WAN Software Signature Verification Bypass Vulnerability](https://agentprime.io/advisories/CVE-2021-1461.md)
  `CVE-2021-1461` · CVE record: Cisco Cisco Catalyst SD-WAN Manager and 1 more · CVSS 4.9 Medium · Not analysed yet · Published 18 Nov 2024 · Tags: Weak cryptography or TLS
- [Cisco SD-WAN vManage Software Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2021-1462.md)
  `CVE-2021-1462` · CVE record: Cisco Cisco Catalyst SD-WAN Manager · CVSS 4.4 Medium · Not analysed yet · Published 18 Nov 2024 · Tags: CWE-20
- [Improper input validation in Cisco Catalyst SD-WAN Manager](https://agentprime.io/advisories/CVE-2021-1465.md)
  `CVE-2021-1465` · CVE record: Cisco Cisco Catalyst SD-WAN Manager · CVSS 4.3 Medium · Not analysed yet · Published 18 Nov 2024 · Tags: CWE-20
- [Cisco SD-WAN vDaemon Buffer Overflow Vulnerability](https://agentprime.io/advisories/CVE-2021-1466.md)
  `CVE-2021-1466` · CVE record: Cisco Cisco Catalyst SD-WAN Manager · CVSS 5.4 Medium · Not analysed yet · Published 15 Nov 2024 · Tags: CWE-20
- [Cisco SD-WAN SQL Injection Vulnerability](https://agentprime.io/advisories/CVE-2021-1470.md)
  `CVE-2021-1470` · CVE record: Cisco Cisco Catalyst SD-WAN Manager · CVSS 4.9 Medium · Not analysed yet · Published 15 Nov 2024 · Tags: SQL injection, CWE-20
- [Cisco SD-WAN vManage Cypher Query Language Injection Vulnerability](https://agentprime.io/advisories/CVE-2021-1481.md)
  `CVE-2021-1481` · CVE record: Cisco Cisco Catalyst SD-WAN Manager · CVSS 4.3 Medium · Not analysed yet · Published 15 Nov 2024 · Tags: Other injection
- [Cisco SD-WAN vManage Authorization Bypass Vulnerability](https://agentprime.io/advisories/CVE-2021-1482.md)
  `CVE-2021-1482` · CVE record: Cisco Cisco Catalyst SD-WAN Manager · CVSS 6.4 Medium · Not analysed yet · Published 15 Nov 2024 · Tags: CWE-20
- [Cisco SD-WAN vManage Authorization Bypass Vulnerability](https://agentprime.io/advisories/CVE-2021-1464.md)
  `CVE-2021-1464` · CVE record: Cisco Cisco Catalyst SD-WAN Manager · CVSS 5.0 Medium · Not analysed yet · Published 15 Nov 2024 · Tags: CWE-20
- [Cisco SD-WAN vManage Software XML External Entity Vulnerability](https://agentprime.io/advisories/CVE-2021-1483.md)
  `CVE-2021-1483` · CVE record: Cisco Cisco Catalyst SD-WAN Manager · CVSS 6.4 Medium · Not analysed yet · Published 15 Nov 2024 · Tags: XML external entities (XXE)
- [Cisco SD-WAN vManage Command Injection Vulnerability](https://agentprime.io/advisories/CVE-2021-1484.md)
  `CVE-2021-1484` · CVE record: Cisco Cisco Catalyst SD-WAN Manager · CVSS 6.5 Medium · Not analysed yet · Published 15 Nov 2024 · Tags: Command injection
- [Cisco SD-WAN vManage Software Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2021-1491.md)
  `CVE-2021-1491` · CVE record: Cisco Cisco Catalyst SD-WAN Manager · CVSS 6.5 Medium · Not analysed yet · Published 15 Nov 2024 · Tags: Path traversal
- [OS command injection in Cisco IOS XR Software and others](https://agentprime.io/advisories/CVE-2022-20655.md)
  `CVE-2022-20655` · CVE record: Cisco Cisco IOS XR Software and 4 more · CVSS 8.8 High · Not analysed yet · Published 15 Nov 2024 · Tags: Command injection
- [Cisco SD-WAN vManage Cross-Site Scripting Vulnerability](https://agentprime.io/advisories/CVE-2024-20475.md)
  `CVE-2024-20475` · CVE record: Cisco Cisco Catalyst SD-WAN Manager · CVSS 6.4 Medium · Not analysed yet · Published 25 Sept 2024 · Tags: Cross-site scripting (XSS)
- [Cisco SD-WAN Software Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2022-20775.md)
  `CVE-2022-20775` · CVE record: Cisco Cisco Catalyst SD-WAN and 4 more · CVSS 7.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.12 · Not analysed yet · Published 30 Sept 2022 · Tags: CWE-25

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=cisco-catalyst-sd-wan-manager>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/cisco-catalyst-sd-wan-manager/>. Everything for agents: <https://agentprime.io/llms.txt>.