Login Request a demo
CC
Product
Cisco Catalyst SD-WAN Manager
by Cisco · last CVE Sep 30, 2026
On CISA KEVExploited in the wild
45
CVEs
9
On KEV
10.0
Max CVSS
1
New 30D
Vulnerabilities45In the news12Timeline
Severity mix
Critical 7High 13Medium 25Low 0
Severity
All severities45Critical7High13Medium25Low0
Exploitation
On CISA KEV9Exploited in the wild9
Watch

Add Cisco Catalyst SD-WAN Manager to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-20182
In wildKEV
10.0
92%
May 14
Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +28 more
CVE-2026-20127
In wildKEV
10.0
89%
Feb 25
Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more
CVE-2026-76504
In wildKEV
9.8
39%
Sep 30
Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability
Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more
CVE-2026-20245
In wildKEV
7.8
25%
Jun 4
Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation Vulnerability
Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more
CVE-2022-20775
In wildKEV
7.8
12%
Sep 30
Cisco SD-WAN Software Privilege Escalation Vulnerability
Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more
CVE-2026-20128
In wildKEV
7.5
7%
Feb 25
Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability
Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more
CVE-2026-20133
In wildKEV
7.5
31%
Feb 25
Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Affected: 17.2.6; 17.2.7; 17.2.8; 17.2.9; 17.2.10; 17.2.4; +34 more
CVE-2026-20262
In wildKEV
6.5
29%
Jun 15
Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability
Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more
CVE-2026-20122
In wildKEV
5.4
26%
Feb 25
Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability
Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more
CVE-2026-20303
9.9
0%
Aug 5
Cisco Catalyst SD-WAN Security Hardening Release - Input Validation Vulnerabilities
Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more
CVE-2026-20304
9.9
0%
Aug 5
Cisco Catalyst SD-WAN Security Hardening Release - Access Control Vulnerabilities
Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more
CVE-2026-20129
9.8
1%
Feb 25
Cisco Catayst SD-WAN Authentication Bypass Vulnerability
Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more
CVE-2026-20310
9.1
1%
Aug 5
Cisco SD-WAN Software Security Hardening Release - Improper Link Resolution Before File Access
Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more
CVE-2026-20312
8.8
0%
Aug 5
Cisco Catalyst SD-WAN Security Hardening Release - Information Disclosure Vulnerabilities
Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more
CVE-2022-20655
8.8
1%
Nov 15
A vulnerability in the implementation of the CLI on a device that is running ConfD could allow an authenticated, local attacker to perform a command injection attack
Affected: All versions, or not specified
CVE-2026-20224
8.6
1%
May 14
Cisco Catalyst SD-WAN Manager XML External Entity Injection Vulnerability
Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more
CVE-2020-26071
8.4
0%
Nov 18
Cisco SD-WAN vEdge Arbitrary File Creation Vulnerability
Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more
CVE-2026-20126
7.8
0%
Feb 25
Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability
Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more
CVE-2025-20122
7.8
0%
May 7
Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability
Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more
CVE-2020-26074
7.8
0%
Nov 18
Cisco SD-WAN vManage Privilege Escalation Vulnerability
Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more
CVE-2026-20313
7.7
0%
Aug 5
Cisco Catalyst SD-WAN Security Hardening Release - Memory Corruption Vulnerabilities
Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more
CVE-2020-26073
7.5
13%
Nov 18
Cisco SD-WAN vManage Directory Traversal Vulnerability
Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more
CVE-2021-1462
6.7
0%
Nov 18
Cisco SD-WAN vManage Software Privilege Escalation Vulnerability
Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +33 more
CVE-2026-20294
6.5
0%
Aug 5
Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability
Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more
CVE-2025-20187
6.5
1%
May 7
Cisco SD-WAN Manager Software Arbitrary File Creation Vulnerability
Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more
CVE-2020-26066
6.5
1%
Nov 18
Cisco SD-WAN vManage Software XML External Entity Vulnerability
Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more
CVE-2021-1232
6.5
1%
Nov 18
Cisco SD-WAN vManage Information Disclosure Vulnerability
Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more
CVE-2021-1484
6.5
1%
Nov 15
Cisco SD-WAN vManage Command Injection Vulnerability
Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more
CVE-2021-1491
6.5
1%
Nov 15
Cisco SD-WAN vManage Software Information Disclosure Vulnerability
Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more
CVE-2021-1482
6.4
1%
Nov 15
Cisco SD-WAN vManage Authorization Bypass Vulnerability
Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more
CVE-2021-1483
6.4
1%
Nov 15
Cisco SD-WAN vManage Software XML External Entity Vulnerability
Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more
CVE-2025-20157
5.9
0%
May 7
Cisco Catalyst vManage Certificate Validation Vulnerability
Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more
CVE-2025-20213
5.5
0%
May 7
Cisco Catalyst SDWAN Manager Arbitrary File Overwrite Vulnerability
Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more
CVE-2026-20210
5.4
0%
May 14
Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability
Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more
CVE-2026-20209
5.4
0%
May 14
Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability
Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more
CVE-2026-20108
5.4
0%
Mar 25
A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack…
Affected: 20.12.1; 20.12.1_LI_Images; 20.12.2; 20.12.3; 20.12.3.1; 20.12.4; +18 more
CVE-2025-20147
5.4
0%
May 7
Cisco SD-WAN vManage Stored Cross-Site Scripting Vulnerability
Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more
CVE-2021-1466
5.4
1%
Nov 15
Cisco SD-WAN vDaemon Buffer Overflow Vulnerability
Affected: 19.2.1; 18.4.4; 20.1.1.1; 20.1.1; 19.3.0; 19.2.2; +32 more
CVE-2021-1234
5.3
1%
Nov 18
Cisco SD-WAN vManage Information Disclosure Vulnerabilities
Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more
CVE-2021-1464
5.0
1%
Nov 15
Cisco SD-WAN vManage Authorization Bypass Vulnerability
Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more
CVE-2021-1461
4.9
0%
Nov 18
Cisco SD-WAN Software Signature Verification Bypass Vulnerability
Affected: 19.2.1; 18.4.4; 19.3.0; 19.2.2; 19.2.099; 18.3.6; +34 more
CVE-2021-1470
4.9
1%
Nov 15
Cisco SD-WAN SQL Injection Vulnerability
Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more
CVE-2025-20216
4.3
0%
May 7
Cisco Catalyst SD-WAN Manager Reflected HTML Injection Vulnerability
Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more
CVE-2021-1465
4.3
1%
Nov 18
A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a directory traversal attack and…
Affected: 17.2.6; 17.2.7; 17.2.8; 17.2.9; 17.2.10; 17.2.4; +33 more
CVE-2021-1481
4.3
1%
Nov 15
Cisco SD-WAN vManage Cypher Query Language Injection Vulnerability
Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more
Showing 45