Cisco Catalyst SD-WAN Manager

11 known vulnerabilities in Cisco Catalyst SD-WAN Manager, 4 critical, 9 actively exploited, with patch priority, exploit likelihood and the news covering them.

Recently exploited

  • CVE-2026-76504 CVSS 9.8 critical · actively exploited Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
  • CVE-2026-20262 CVSS 6.5 medium · actively exploited Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability
  • CVE-2026-20245 CVSS 7.8 high · actively exploited Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability
  • CVE-2026-20182 CVSS 10.0 critical · actively exploited Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
  • CVE-2026-20133 CVSS 7.5 high · actively exploited Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
  • CVE-2026-20128 CVSS 7.5 high · actively exploited Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability
  • CVE-2026-20127 CVSS 10.0 critical · actively exploited Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability
  • CVE-2026-20122 CVSS 5.4 medium · actively exploited Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability
  • CVE-2022-20775 CVSS 7.8 high · actively exploited Cisco SD-WAN Path Traversal Vulnerability

Latest vulnerabilities

  • CVE-2026-76504 CVSS 9.8 critical · actively exploited Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
  • CVE-2026-20262 CVSS 6.5 medium · actively exploited Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability
  • CVE-2026-20245 CVSS 7.8 high · actively exploited Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability
  • CVE-2026-20182 CVSS 10.0 critical · actively exploited Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
  • CVE-2026-20133 CVSS 7.5 high · actively exploited Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
  • CVE-2026-20129 CVSS 9.8 critical A vulnerability in the API user authentication of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain…
  • CVE-2026-20128 CVSS 7.5 high · actively exploited Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability
  • CVE-2026-20127 CVSS 10.0 critical · actively exploited Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability
  • CVE-2026-20126 CVSS 7.8 high A vulnerability in Cisco Catalyst SD-WAN Manager could allow an authenticated, local attacker with low privileges to gain root privileges…
  • CVE-2026-20122 CVSS 5.4 medium · actively exploited Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability
  • CVE-2022-20775 CVSS 7.8 high · actively exploited Cisco SD-WAN Path Traversal Vulnerability