Cisco Cisco Catalyst SD-WAN Manager
46 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-76504 | 20.1.12 ; 19.2.1 ; 18.4.4 ; … | Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability | CRITICAL 9.8 | 39 % | KEV | |
| CVE-2026-20313 | 20.1.12 ; 19.2.1 ; 18.4.4 ; … | Cisco Catalyst SD-WAN Security Hardening Release - Memory Corruption Vulnerabilities | HIGH 7.7 | 0.4 % | ||
| CVE-2026-20312 | 20.1.12 ; 19.2.1 ; 18.4.4 ; … | Cisco Catalyst SD-WAN Security Hardening Release - Information Disclosure Vulnerabilities | HIGH 8.8 | 0.3 % | ||
| CVE-2026-20310 | 20.1.12 ; 19.2.1 ; 18.4.4 ; … | Cisco SD-WAN Software Security Hardening Release - Improper Link Resolution Before File Access | CRITICAL 9.1 | 0.6 % | ||
| CVE-2026-20303 | 20.1.12 ; 19.2.1 ; 18.4.4 ; … | Cisco Catalyst SD-WAN Security Hardening Release - Input Validation Vulnerabilities | CRITICAL 9.9 | 0.5 % | ||
| CVE-2026-20294 | 20.1.12 ; 19.2.1 ; 18.4.4 ; … | Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-20304 | 20.1.12 ; 19.2.1 ; 18.4.4 ; … | Cisco Catalyst SD-WAN Security Hardening Release - Access Control Vulnerabilities | CRITICAL 9.9 | 0.4 % | ||
| CVE-2026-20262 | 20.1.12 ; 19.2.1 ; 18.4.4 ; … | Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability | MEDIUM 6.5 | 29 % | KEV | |
| CVE-2026-20245 | 20.1.12 ; 19.2.1 ; 18.4.4 ; … | Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation Vulnerability | HIGH 7.8 | 25 % | KEV | |
| CVE-2026-20224 | 20.1.12 ; 19.2.1 ; 18.4.4 ; … | Cisco Catalyst SD-WAN Manager XML External Entity Injection Vulnerability | HIGH 8.6 | 1.1 % | ||
| CVE-2026-20210 | 20.1.12 ; 19.2.1 ; 18.4.4 ; … | Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability | MEDIUM 5.4 | 0.2 % | ||
| CVE-2026-20209 | 20.1.12 ; 19.2.1 ; 18.4.4 ; … | Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability | MEDIUM 5.4 | 0.2 % | ||
| CVE-2026-20182 | 20.1.12 ; 19.2.1 ; 18.4.4 ; … | Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability | CRITICAL 10.0 | 92 % | KEV | |
| CVE-2026-20108 | 20.12.1 ; 20.12.1_LI_Images ; 20.12.2 ; … | A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to cond | MEDIUM 5.4 | 0.2 % | ||
| CVE-2026-20122 | 20.1.12 ; 19.2.1 ; 18.4.4 ; … | Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability | MEDIUM 5.4 | 26 % | KEV | |
| CVE-2026-20127 | 20.1.12 ; 19.2.1 ; 18.4.4 ; … | Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability | CRITICAL 10.0 | 89 % | KEV | |
| CVE-2026-20128 | 20.1.12 ; 19.2.1 ; 18.4.4 ; … | Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability | HIGH 7.5 | 7.3 % | KEV | |
| CVE-2026-20129 | 20.1.12 ; 19.2.1 ; 18.4.4 ; … | Cisco Catayst SD-WAN Authentication Bypass Vulnerability | CRITICAL 9.8 | 0.8 % | ||
| CVE-2026-20126 | 20.1.12 ; 19.2.1 ; 18.4.4 ; … | Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability | HIGH 8.8 | 0.3 % | ||
| CVE-2026-20133 | 17.2.6 ; 17.2.7 ; 17.2.8 ; … | A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on an affect | HIGH 7.5 | 31 % | KEV | |
| CVE-2025-20147 | 20.1.12 ; 19.2.1 ; 18.4.4 ; … | Cisco SD-WAN vManage Stored Cross-Site Scripting Vulnerability | MEDIUM 5.4 | 0.4 % | ||
| CVE-2025-20216 | 20.1.12 ; 19.2.1 ; 18.4.4 ; … | Cisco Catalyst SD-WAN Manager Reflected HTML Injection Vulnerability | MEDIUM 4.7 | 0.3 % | ||
| CVE-2025-20187 | 20.1.12 ; 19.2.1 ; 18.4.4 ; … | Cisco SD-WAN Manager Software Arbitrary File Creation Vulnerability | MEDIUM 6.5 | 1.3 % | ||
| CVE-2025-20122 | 20.1.12 ; 19.2.1 ; 18.4.4 ; … | Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability | HIGH 7.8 | 0.2 % | ||
| CVE-2025-20213 | 20.1.12 ; 19.2.1 ; 18.4.4 ; … | Cisco Catalyst SDWAN Manager Arbitrary File Overwrite Vulnerability | MEDIUM 5.5 | 0.2 % | ||
| CVE-2025-20157 | 20.1.12 ; 19.2.1 ; 18.4.4 ; … | Cisco Catalyst vManage Certificate Validation Vulnerability | MEDIUM 5.9 | 0.3 % | ||
| CVE-2020-26066 | 20.1.12 ; 19.2.1 ; 18.4.4 ; … | Cisco SD-WAN vManage Software XML External Entity Vulnerability | MEDIUM 6.5 | 0.6 % | ||
| CVE-2020-26071 | 20.1.12 ; 19.2.1 ; 18.4.4 ; … | Cisco SD-WAN vEdge Arbitrary File Creation Vulnerability | HIGH 8.4 | 0.2 % | ||
| CVE-2020-26073 | 20.1.12 ; 19.2.1 ; 18.4.4 ; … | Cisco SD-WAN vManage Directory Traversal Vulnerability | HIGH 7.5 | 13 % | ||
| CVE-2020-26074 | 20.1.12 ; 19.2.1 ; 18.4.4 ; … | Cisco SD-WAN vManage Privilege Escalation Vulnerability | HIGH 7.8 | 0.2 % | ||
| CVE-2021-1234 | 20.1.12 ; 19.2.1 ; 18.4.4 ; … | Cisco SD-WAN vManage Information Disclosure Vulnerabilities | MEDIUM 5.3 | 0.8 % | ||
| CVE-2021-1232 | 20.1.12 ; 19.2.1 ; 18.4.4 ; … | Cisco SD-WAN vManage Information Disclosure Vulnerability | MEDIUM 6.5 | 1.1 % | ||
| CVE-2021-1461 | 19.2.1 ; 18.4.4 ; 19.3.0 ; … | Cisco SD-WAN Software Signature Verification Bypass Vulnerability | MEDIUM 4.9 | 0.4 % | ||
| CVE-2021-1462 | 20.1.12 ; 19.2.1 ; 18.4.4 ; … | Cisco SD-WAN vManage Software Privilege Escalation Vulnerability | MEDIUM 6.7 | 0.2 % | ||
| CVE-2021-1465 | 17.2.6 ; 17.2.7 ; 17.2.8 ; … | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to cond | MEDIUM 4.3 | 1.2 % | ||
| CVE-2021-1466 | 19.2.1 ; 18.4.4 ; 20.1.1.1 ; … | Cisco SD-WAN vDaemon Buffer Overflow Vulnerability | MEDIUM 5.4 | 0.6 % | ||
| CVE-2021-1470 | 20.1.12 ; 19.2.1 ; 18.4.4 ; … | Cisco SD-WAN SQL Injection Vulnerability | MEDIUM 4.9 | 1.1 % | ||
| CVE-2021-1481 | 20.1.12 ; 19.2.1 ; 18.4.4 ; … | Cisco SD-WAN vManage Cypher Query Language Injection Vulnerability | MEDIUM 4.3 | 0.8 % | ||
| CVE-2021-1482 | 20.1.12 ; 19.2.1 ; 18.4.4 ; … | Cisco SD-WAN vManage Authorization Bypass Vulnerability | MEDIUM 6.4 | 0.6 % | ||
| CVE-2021-1464 | 20.1.12 ; 19.2.1 ; 18.4.4 ; … | Cisco SD-WAN vManage Authorization Bypass Vulnerability | MEDIUM 5.0 | 1.3 % | ||
| CVE-2021-1483 | 20.1.12 ; 19.2.1 ; 18.4.4 ; … | Cisco SD-WAN vManage Software XML External Entity Vulnerability | MEDIUM 6.4 | 0.9 % | ||
| CVE-2021-1484 | 20.1.12 ; 19.2.1 ; 18.4.4 ; … | Cisco SD-WAN vManage Command Injection Vulnerability | MEDIUM 6.5 | 1.2 % | ||
| CVE-2021-1491 | 20.1.12 ; 19.2.1 ; 18.4.4 ; … | Cisco SD-WAN vManage Software Information Disclosure Vulnerability | MEDIUM 6.5 | 1.3 % | ||
| CVE-2022-20655 | | A vulnerability in the implementation of the CLI on a device that is running ConfD could allow an authenticated, local attacker to perform a | HIGH 8.8 | 0.8 % | ||
| CVE-2024-20475 | 20.6.1 ; 20.6.1.1 ; 20.6.0.18.3 ; … | Cisco SD-WAN vManage Cross-Site Scripting Vulnerability | MEDIUM 6.4 | 0.3 % | ||
| CVE-2022-20775 | 20.1.12 ; 19.2.1 ; 18.4.4 ; … | Cisco SD-WAN Software Privilege Escalation Vulnerability | HIGH 7.8 | 12 % | KEV |