CVE-2026-20128 Cisco Cisco Catalyst SD-WAN Manager
A vulnerability in the Data Collection Agent (DCA) feature of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain DCA user privileges on an affected system. This vulnerability is due to the presence of a credential file for…
- CVSS
- 7.5 High
- EPSS
- 8.3%
- Percentile
- 95
- Published
- 2026-02-25
- Force
- 9 of 12
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
On CISA’s exploited list
Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability
- Added
- 2026-04-20
- Federal patch deadline
- 2026-04-23
- Ransomware use
- not known