CVE-2026-20262 Cisco Cisco Catalyst SD-WAN Manager
A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker to create a file or overwrite any file on the filesystem of an affected system. This vulnerability exists because the…
- CVSS
- 6.5 Medium
- EPSS
- 29%
- Percentile
- 98
- Published
- 2026-06-15
- Force
- 9 of 12
- Public PoC
- 2
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
On CISA’s exploited list
Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability
- Added
- 2026-06-15
- Federal patch deadline
- 2026-06-29
- Ransomware use
- not known