CVE-2026-20122 Cisco Cisco Catalyst SD-WAN Manager
A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite arbitrary files on the local file system. To exploit this vulnerability, the attacker must have valid read-only credentials with API access…
- CVSS
- 5.4 Medium
- EPSS
- 26%
- Percentile
- 98
- Published
- 2026-02-25
- Force
- 8 of 12
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
On CISA’s exploited list
Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability
- Added
- 2026-04-20
- Federal patch deadline
- 2026-04-23
- Ransomware use
- not known