Advisories · Technology

Cisco Catalyst SD-WAN Manager.

Every CVE that names Cisco Catalyst SD-WAN Manager among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-76504 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability
- Cisco Catalyst SD-WAN Manager
- CWE-177
Not analysed yet 30 Sept 2026
CVE-2026-20313 CVE record

CVSS 7.7 High

Cisco Catalyst SD-WAN Security Hardening Release - Memory Corruption Vulnerabilities
- Cisco Catalyst SD-WAN Controller
- Cisco Catalyst SD-WAN Manager
- CWE-1284
Not analysed yet 5 Aug 2026
CVE-2026-20312 CVE record

CVSS 8.8 High

Cisco Catalyst SD-WAN Security Hardening Release - Information Disclosure Vulnerabilities
- Cisco Catalyst SD-WAN Controller
- Cisco Catalyst SD-WAN Manager
- Information disclosure
Not analysed yet 5 Aug 2026
CVE-2026-20310 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Cisco SD-WAN Software Security Hardening Release - Improper Link Resolution Before File Access
- Cisco Catalyst SD-WAN Controller
- Cisco Catalyst SD-WAN Manager
- Path traversal
Not analysed yet 5 Aug 2026
CVE-2026-20303 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Cisco Catalyst SD-WAN Security Hardening Release - Input Validation Vulnerabilities
- Cisco Catalyst SD-WAN Controller
- Cisco Catalyst SD-WAN Manager
- CWE-20
Not analysed yet 5 Aug 2026
CVE-2026-20294 CVE record

CVSS 6.5 Medium

Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability
- Cisco Catalyst SD-WAN Manager
- Weak cryptography or TLS
Not analysed yet 5 Aug 2026
CVE-2026-20304 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Cisco Catalyst SD-WAN Security Hardening Release - Access Control Vulnerabilities
- Cisco Catalyst SD-WAN Controller
- Cisco Catalyst SD-WAN Manager
- Broken access control
Not analysed yet 5 Aug 2026
CVE-2026-20262 CVE record

CVSS 6.5 MediumCritical · KEVKEV

Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability
- Cisco Catalyst SD-WAN Manager
- Path traversal
Not analysed yet 15 Jun 2026
CVE-2026-20245 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation Vulnerability
- Cisco Catalyst SD-WAN Controller
- Cisco Catalyst SD-WAN Manager
- CWE-116
Not analysed yet 4 Jun 2026
CVE-2026-20224 CVE record

CVSS 8.6 High

Cisco Catalyst SD-WAN Manager XML External Entity Injection Vulnerability
- Cisco Catalyst SD-WAN Manager
- CWE-20
Not analysed yet 14 May 2026
CVE-2026-20210 CVE record

CVSS 5.4 Medium

Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability
- Cisco Catalyst SD-WAN Manager
- CWE-779
Not analysed yet 14 May 2026
CVE-2026-20209 CVE record

CVSS 5.4 Medium

Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability
- Cisco Catalyst SD-WAN Manager
- CWE-779
Not analysed yet 14 May 2026
CVE-2026-20182 CVE record

CVSS 10.0 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
- Cisco Catalyst SD-WAN Controller
- Cisco Catalyst SD-WAN Manager
- Authentication bypass
Not analysed yet 14 May 2026
CVE-2026-20108 CVE record

CVSS 5.4 Medium

Cross-site scripting in Cisco Catalyst SD-WAN Manager
- Cisco Catalyst SD-WAN Manager
- Cross-site scripting (XSS)
Not analysed yet 25 Mar 2026
CVE-2026-20122 CVE record

CVSS 5.4 MediumCritical · KEVKEV

Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability
- Cisco Catalyst SD-WAN Manager
- CWE-648
Not analysed yet 25 Feb 2026
CVE-2026-20127 CVE record

CVSS 10.0 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
- Cisco Catalyst SD-WAN Manager
- Authentication bypass
Not analysed yet 25 Feb 2026
CVE-2026-20128 CVE record

CVSS 7.5 HighCritical · KEVKEV

Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability
- Cisco Catalyst SD-WAN Manager
- CWE-257
Not analysed yet 25 Feb 2026
CVE-2026-20129 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Cisco Catayst SD-WAN Authentication Bypass Vulnerability
- Cisco Catalyst SD-WAN Manager
- Authentication bypass
Not analysed yet 25 Feb 2026
CVE-2026-20126 CVE record

CVSS 8.8 High

Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability
- Cisco Catalyst SD-WAN Manager
- CWE-648
Not analysed yet 25 Feb 2026
CVE-2026-20133 CVE record

CVSS 6.5 MediumCritical · KEVKEV

Information disclosure in Cisco Catalyst SD-WAN Manager
- Cisco Catalyst SD-WAN Manager
- Information disclosure
Not analysed yet 25 Feb 2026
CVE-2025-20147 CVE record

CVSS 5.4 Medium

Cisco SD-WAN vManage Stored Cross-Site Scripting Vulnerability
- Cisco Catalyst SD-WAN Manager
- Cross-site scripting (XSS)
Not analysed yet 7 May 2025
CVE-2025-20216 CVE record

CVSS 4.7 Medium

Cisco Catalyst SD-WAN Manager Reflected HTML Injection Vulnerability
- Cisco Catalyst SD-WAN Manager
- Other injection
Not analysed yet 7 May 2025
CVE-2025-20187 CVE record

CVSS 6.5 Medium

Cisco SD-WAN Manager Software Arbitrary File Creation Vulnerability
- Cisco Catalyst SD-WAN Manager
- Path traversal
Not analysed yet 7 May 2025
CVE-2025-20122 CVE record

CVSS 7.8 High

Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability
- Cisco Catalyst SD-WAN Manager
- CWE-300
Not analysed yet 7 May 2025
CVE-2025-20213 CVE record

CVSS 5.5 Medium

Cisco Catalyst SDWAN Manager Arbitrary File Overwrite Vulnerability
- Cisco Catalyst SD-WAN Manager
- Command injection
Not analysed yet 7 May 2025
CVE-2025-20157 CVE record

CVSS 5.9 Medium

Cisco Catalyst vManage Certificate Validation Vulnerability
- Cisco Catalyst SD-WAN Manager
- Weak cryptography or TLS
Not analysed yet 7 May 2025
CVE-2020-26066 CVE record

CVSS 6.5 Medium

Cisco SD-WAN vManage Software XML External Entity Vulnerability
- Cisco Catalyst SD-WAN Manager
- XML external entities (XXE)
Not analysed yet 18 Nov 2024
CVE-2020-26071 CVE record

CVSS 8.4 High

Cisco SD-WAN vEdge Arbitrary File Creation Vulnerability
- Cisco Catalyst SD-WAN Manager
- Cisco SD-WAN vContainer
- Path traversal
Not analysed yet 18 Nov 2024
CVE-2020-26073 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Cisco SD-WAN vManage Directory Traversal Vulnerability
- Cisco Catalyst SD-WAN Manager
- Path traversal
Not analysed yet 18 Nov 2024
CVE-2020-26074 CVE record

CVSS 7.8 High

Cisco SD-WAN vManage Privilege Escalation Vulnerability
- Cisco Catalyst SD-WAN Manager
- Privilege escalation
Not analysed yet 18 Nov 2024
CVE-2021-1234 CVE record

CVSS 5.3 Medium

Cisco SD-WAN vManage Information Disclosure Vulnerabilities
- Cisco Catalyst SD-WAN Manager
- Information disclosure
Not analysed yet 18 Nov 2024
CVE-2021-1232 CVE record

CVSS 6.5 Medium

Cisco SD-WAN vManage Information Disclosure Vulnerability
- Cisco Catalyst SD-WAN Manager
- Hard-coded credentials
Not analysed yet 18 Nov 2024
CVE-2021-1461 CVE record

CVSS 4.9 Medium

Cisco SD-WAN Software Signature Verification Bypass Vulnerability
- Cisco Catalyst SD-WAN Manager
- Cisco SD-WAN vEdge Router
- Weak cryptography or TLS
Not analysed yet 18 Nov 2024
CVE-2021-1462 CVE record

CVSS 4.4 Medium

Cisco SD-WAN vManage Software Privilege Escalation Vulnerability
- Cisco Catalyst SD-WAN Manager
- CWE-20
Not analysed yet 18 Nov 2024
CVE-2021-1465 CVE record

CVSS 4.3 Medium

Improper input validation in Cisco Catalyst SD-WAN Manager
- Cisco Catalyst SD-WAN Manager
- CWE-20
Not analysed yet 18 Nov 2024
CVE-2021-1466 CVE record

CVSS 5.4 Medium

Cisco SD-WAN vDaemon Buffer Overflow Vulnerability
- Cisco Catalyst SD-WAN Manager
- CWE-20
Not analysed yet 15 Nov 2024
CVE-2021-1470 CVE record

CVSS 4.9 Medium

Cisco SD-WAN SQL Injection Vulnerability
- Cisco Catalyst SD-WAN Manager
- SQL injection
- CWE-20
Not analysed yet 15 Nov 2024
CVE-2021-1481 CVE record

CVSS 4.3 Medium

Cisco SD-WAN vManage Cypher Query Language Injection Vulnerability
- Cisco Catalyst SD-WAN Manager
- Other injection
Not analysed yet 15 Nov 2024
CVE-2021-1482 CVE record

CVSS 6.4 Medium

Cisco SD-WAN vManage Authorization Bypass Vulnerability
- Cisco Catalyst SD-WAN Manager
- CWE-20
Not analysed yet 15 Nov 2024
CVE-2021-1464 CVE record

CVSS 5.0 Medium

Cisco SD-WAN vManage Authorization Bypass Vulnerability
- Cisco Catalyst SD-WAN Manager
- CWE-20
Not analysed yet 15 Nov 2024
CVE-2021-1483 CVE record

CVSS 6.4 Medium

Cisco SD-WAN vManage Software XML External Entity Vulnerability
- Cisco Catalyst SD-WAN Manager
- XML external entities (XXE)
Not analysed yet 15 Nov 2024
CVE-2021-1484 CVE record

CVSS 6.5 Medium

Cisco SD-WAN vManage Command Injection Vulnerability
- Cisco Catalyst SD-WAN Manager
- Command injection
Not analysed yet 15 Nov 2024
CVE-2021-1491 CVE record

CVSS 6.5 Medium

Cisco SD-WAN vManage Software Information Disclosure Vulnerability
- Cisco Catalyst SD-WAN Manager
- Path traversal
Not analysed yet 15 Nov 2024
CVE-2022-20655 CVE record

CVSS 8.8 High

OS command injection in Cisco IOS XR Software and others
- Cisco IOS XR Software
- Cisco Virtual Topology System (VTS)
- Command injection
Not analysed yet 15 Nov 2024
CVE-2024-20475 CVE record

CVSS 6.4 Medium

Cisco SD-WAN vManage Cross-Site Scripting Vulnerability
- Cisco Catalyst SD-WAN Manager
- Cross-site scripting (XSS)
Not analysed yet 25 Sept 2024
CVE-2022-20775 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Cisco SD-WAN Software Privilege Escalation Vulnerability
- Cisco Catalyst SD-WAN
- Cisco Catalyst SD-WAN Manager
- CWE-25
Not analysed yet 30 Sept 2022