CVE-2026-20133 Cisco Cisco Catalyst SD-WAN Manager
A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system. This vulnerability is due to insufficient file system restrictions. An authenticated attacker with netadmin…
- CVSS
- 6.5 Medium
- EPSS
- 35%
- Percentile
- 99
- Published
- 2026-02-25
- Force
- 9 of 12
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
On CISA’s exploited list
Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
- Added
- 2026-04-20
- Federal patch deadline
- 2026-04-23
- Ransomware use
- not known