CC
Product
Cisco Catalyst SD-WAN Manager
On CISA KEVExploited in the wild
46
CVEs
9
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 7High 13Medium 26Low 0
Watch
Add Cisco Catalyst SD-WAN Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-20262 In wildKEV | 6.5 | Jun 15 | Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more |
| CVE-2026-20122 In wildKEV | 5.4 | Feb 25 | Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more |
| CVE-2021-1462 | 6.7 | Nov 18 | Cisco SD-WAN vManage Software Privilege Escalation Vulnerability Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +33 more |
| CVE-2026-20294 | 6.5 | Aug 5 | Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more |
| CVE-2025-20187 | 6.5 | May 7 | Cisco SD-WAN Manager Software Arbitrary File Creation Vulnerability Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more |
| CVE-2020-26066 | 6.5 | Nov 18 | Cisco SD-WAN vManage Software XML External Entity Vulnerability Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more |
| CVE-2021-1232 | 6.5 | Nov 18 | Cisco SD-WAN vManage Information Disclosure Vulnerability Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more |
| CVE-2021-1484 | 6.5 | Nov 15 | Cisco SD-WAN vManage Command Injection Vulnerability Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more |
| CVE-2021-1491 | 6.5 | Nov 15 | Cisco SD-WAN vManage Software Information Disclosure Vulnerability Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more |
| CVE-2021-1482 | 6.4 | Nov 15 | Cisco SD-WAN vManage Authorization Bypass Vulnerability Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more |
| CVE-2021-1483 | 6.4 | Nov 15 | Cisco SD-WAN vManage Software XML External Entity Vulnerability Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more |
| CVE-2025-20157 | 5.9 | May 7 | Cisco Catalyst vManage Certificate Validation Vulnerability Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more |
| CVE-2025-20213 | 5.5 | May 7 | Cisco Catalyst SDWAN Manager Arbitrary File Overwrite Vulnerability Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more |
| CVE-2026-20210 | 5.4 | May 14 | Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more |
| CVE-2026-20209 | 5.4 | May 14 | Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more |
| CVE-2026-20108 | 5.4 | Mar 25 | A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack… Affected: 20.12.1; 20.12.1_LI_Images; 20.12.2; 20.12.3; 20.12.3.1; 20.12.4; +18 more |
| CVE-2025-20147 | 5.4 | May 7 | Cisco SD-WAN vManage Stored Cross-Site Scripting Vulnerability Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more |
| CVE-2021-1466 | 5.4 | Nov 15 | Cisco SD-WAN vDaemon Buffer Overflow Vulnerability Affected: 19.2.1; 18.4.4; 20.1.1.1; 20.1.1; 19.3.0; 19.2.2; +32 more |
| CVE-2024-20475 | 5.4 | Sep 25 | Cisco SD-WAN vManage Cross-Site Scripting Vulnerability Affected: 20.6.1; 20.6.1.1; 20.6.0.18.3; 20.6.0.18.4; 20.6.1.0.1; 20.6.2; +34 more |
| CVE-2021-1234 | 5.3 | Nov 18 | Cisco SD-WAN vManage Information Disclosure Vulnerabilities Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more |
| CVE-2021-1464 | 5.0 | Nov 15 | Cisco SD-WAN vManage Authorization Bypass Vulnerability Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more |
| CVE-2021-1461 | 4.9 | Nov 18 | Cisco SD-WAN Software Signature Verification Bypass Vulnerability Affected: 19.2.1; 18.4.4; 19.3.0; 19.2.2; 19.2.099; 18.3.6; +34 more |
| CVE-2021-1470 | 4.9 | Nov 15 | Cisco SD-WAN SQL Injection Vulnerability Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more |
| CVE-2025-20216 | 4.3 | May 7 | Cisco Catalyst SD-WAN Manager Reflected HTML Injection Vulnerability Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more |
| CVE-2021-1465 | 4.3 | Nov 18 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a directory traversal attack and… Affected: 17.2.6; 17.2.7; 17.2.8; 17.2.9; 17.2.10; 17.2.4; +33 more |
| CVE-2021-1481 | 4.3 | Nov 15 | Cisco SD-WAN vManage Cypher Query Language Injection Vulnerability Affected: 20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; +34 more |
Showing 26
