Cisco Catalyst SD-WAN Manager
Cisco- Product type
- Other
- Catalog vulnerabilities
- 46
Severity across 46 analyzed records
en
Verify to analyze this security profile
As of 10/02/2026, within CyStack's analyzed data, Cisco Catalyst SD-WAN Manager has 7 security vulnerabilities published in the last 90 days. Of these, 6 are rated High or Critical. Notably, 1 of these vulnerabilities is listed in the CISA KEV catalog. CyStack recommends that organizations and individual users remediate applicable vulnerabilities as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Cisco Catalyst SD-WAN Manager and determine which vulnerabilities affect that version.
| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-76504Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability | Exploitation statusKEV | FixNot confirmed | Published09/30/2026 | SeverityCritical |
CVE-2026-20313Cisco Catalyst SD-WAN Security Hardening Release - Memory Corruption Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published08/05/2026 | SeverityHigh |
CVE-2026-20312Cisco Catalyst SD-WAN Security Hardening Release - Information Disclosure Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published08/05/2026 | SeverityHigh |
CVE-2026-20310Cisco SD-WAN Software Security Hardening Release - Improper Link Resolution Before File Access | Exploitation statusNot known exploited | FixNot confirmed | Published08/05/2026 | SeverityCritical |
CVE-2026-20303Cisco Catalyst SD-WAN Security Hardening Release - Input Validation Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published08/05/2026 | SeverityCritical |
CVE-2026-20294Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published08/05/2026 | SeverityMedium |
CVE-2026-20304Cisco Catalyst SD-WAN Security Hardening Release - Access Control Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published08/05/2026 | SeverityCritical |
CVE-2026-20262Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability | Exploitation statusKEV | FixNot confirmed | Published06/15/2026 | SeverityMedium |
CVE-2026-20245Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation Vulnerability | Exploitation statusKEV | FixNot confirmed | Published06/04/2026 | SeverityHigh |
CVE-2026-20224Cisco Catalyst SD-WAN Manager XML External Entity Injection Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published05/14/2026 | SeverityHigh |
CVE-2026-20210Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published05/14/2026 | SeverityMedium |
CVE-2026-20209Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published05/14/2026 | SeverityMedium |
CVE-2026-20182Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability | Exploitation statusKEV | FixNot confirmed | Published05/14/2026 | SeverityCritical |
CVE-2026-20108 | Exploitation statusNot known exploited | FixNot confirmed | Published03/25/2026 | SeverityMedium |
CVE-2026-20122Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability | Exploitation statusKEV | FixNot confirmed | Published02/25/2026 | SeverityMedium |
CVE-2026-20127Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability | Exploitation statusKEV | FixNot confirmed | Published02/25/2026 | SeverityCritical |
CVE-2026-20128Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability | Exploitation statusKEV | FixNot confirmed | Published02/25/2026 | SeverityHigh |
CVE-2026-20129Cisco Catayst SD-WAN Authentication Bypass Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published02/25/2026 | SeverityCritical |
CVE-2026-20126Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published02/25/2026 | SeverityHigh |
CVE-2026-20133 | Exploitation statusKEV | FixNot confirmed | Published02/25/2026 | SeverityMedium |
CVE-2025-20147Cisco SD-WAN vManage Stored Cross-Site Scripting Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published05/07/2025 | SeverityMedium |
CVE-2025-20216Cisco Catalyst SD-WAN Manager Reflected HTML Injection Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published05/07/2025 | SeverityMedium |
CVE-2025-20187Cisco SD-WAN Manager Software Arbitrary File Creation Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published05/07/2025 | SeverityMedium |
CVE-2025-20122Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published05/07/2025 | SeverityHigh |
CVE-2025-20213Cisco Catalyst SDWAN Manager Arbitrary File Overwrite Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published05/07/2025 | SeverityMedium |
CVE-2025-20157Cisco Catalyst vManage Certificate Validation Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published05/07/2025 | SeverityMedium |
CVE-2020-26066Cisco SD-WAN vManage Software XML External Entity Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published11/18/2024 | SeverityMedium |
CVE-2020-26071Cisco SD-WAN vEdge Arbitrary File Creation Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published11/18/2024 | SeverityHigh |
CVE-2020-26073Cisco SD-WAN vManage Directory Traversal Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published11/18/2024 | SeverityHigh |
CVE-2020-26074Cisco SD-WAN vManage Privilege Escalation Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published11/18/2024 | SeverityHigh |
CVE-2021-1234Cisco SD-WAN vManage Information Disclosure Vulnerabilities | Exploitation statusNot known exploited | FixNot confirmed | Published11/18/2024 | SeverityMedium |
CVE-2021-1232Cisco SD-WAN vManage Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published11/18/2024 | SeverityMedium |
CVE-2021-1461Cisco SD-WAN Software Signature Verification Bypass Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published11/18/2024 | SeverityMedium |
CVE-2021-1462Cisco SD-WAN vManage Software Privilege Escalation Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published11/18/2024 | SeverityMedium |
CVE-2021-1465 | Exploitation statusNot known exploited | FixNot confirmed | Published11/18/2024 | SeverityMedium |
CVE-2021-1466Cisco SD-WAN vDaemon Buffer Overflow Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published11/15/2024 | SeverityMedium |
CVE-2021-1470Cisco SD-WAN SQL Injection Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published11/15/2024 | SeverityMedium |
CVE-2021-1481Cisco SD-WAN vManage Cypher Query Language Injection Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published11/15/2024 | SeverityMedium |
CVE-2021-1482Cisco SD-WAN vManage Authorization Bypass Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published11/15/2024 | SeverityMedium |
CVE-2021-1464Cisco SD-WAN vManage Authorization Bypass Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published11/15/2024 | SeverityMedium |
CVE-2021-1483Cisco SD-WAN vManage Software XML External Entity Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published11/15/2024 | SeverityMedium |
CVE-2021-1484Cisco SD-WAN vManage Command Injection Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published11/15/2024 | SeverityMedium |
CVE-2021-1491Cisco SD-WAN vManage Software Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published11/15/2024 | SeverityMedium |
CVE-2022-20655 | Exploitation statusNot known exploited | FixNot confirmed | Published11/15/2024 | SeverityHigh |
CVE-2024-20475Cisco SD-WAN vManage Cross-Site Scripting Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Published09/25/2024 | SeverityMedium |
CVE-2022-20775Cisco SD-WAN Software Privilege Escalation Vulnerability | Exploitation statusKEV | FixNot confirmed | Published09/30/2022 | SeverityHigh |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan