What’s Vulnerable › Products
Cisco Catalyst SD-WAN Manager vulnerabilities
100 known vulnerabilities, 9 confirmed exploited in the wild (CISA KEV), 44 published in the last 12 months.
Check whether your Cisco Catalyst SD-WAN Manager version is affected
Exploited Cisco Catalyst SD-WAN Manager vulnerabilities
- CVE-2026-76504 — Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
- CVE-2026-20262 — Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability
- CVE-2026-20245 — Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability
- CVE-2026-20182 — Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
- CVE-2026-20133 — Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
- CVE-2026-20128 — Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability
- CVE-2026-20122 — Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability
- CVE-2026-20127 — Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability
- CVE-2022-20775 — Cisco SD-WAN Path Traversal Vulnerability
Latest Cisco Catalyst SD-WAN Manager vulnerabilities
- CVE-2026-76504 — Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability (CVSS 9.8) — exploited
- CVE-2026-20313 — Cisco Catalyst SD-WAN Security Hardening Release - Memory Corruption Vulnerabilities (CVSS 7.7)
- CVE-2026-20312 — Cisco Catalyst SD-WAN Security Hardening Release - Information Disclosure Vulnerabilities (CVSS 8.8)
- CVE-2026-20310 — Cisco SD-WAN Software Security Hardening Release - Improper Link Resolution Before File Access (CVSS 9.1)
- CVE-2026-20304 — Cisco Catalyst SD-WAN Security Hardening Release - Access Control Vulnerabilities (CVSS 9.9)
- CVE-2026-20303 — Cisco Catalyst SD-WAN Security Hardening Release - Input Validation Vulnerabilities (CVSS 9.9)
- CVE-2026-20294 — Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability (CVSS 6.5)
- CVE-2026-20262 — Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability (CVSS 6.5) — exploited
- CVE-2026-20245 — Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability (CVSS 7.8) — exploited
- CVE-2026-20224 — Cisco Catalyst SD-WAN Manager XML External Entity Injection Vulnerability (CVSS 8.6)
- CVE-2026-20210 — Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability (CVSS 5.4)
- CVE-2026-20209 — Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability (CVSS 5.4)
- CVE-2026-20182 — Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability (CVSS 10.0) — exploited
- CVE-2026-20108 — (CVSS 5.4)
- CVE-2026-20133 — Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVSS 7.5) — exploited
- CVE-2026-20129 — Cisco Catayst SD-WAN Authentication Bypass Vulnerability (CVSS 9.8)
- CVE-2026-20128 — Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability (CVSS 7.5) — exploited
- CVE-2026-20127 — Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability (CVSS 10.0) — exploited
- CVE-2026-20126 — Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability (CVSS 7.8)
- CVE-2026-20122 — Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability (CVSS 5.4) — exploited
- CVE-2025-20216 — Cisco Catalyst SD-WAN Manager Reflected HTML Injection Vulnerability (CVSS 4.3)
- CVE-2025-20213 — Cisco Catalyst SDWAN Manager Arbitrary File Overwrite Vulnerability (CVSS 5.5)
- CVE-2025-20187 — Cisco SD-WAN Manager Software Arbitrary File Creation Vulnerability (CVSS 6.5)
- CVE-2025-20157 — Cisco Catalyst vManage Certificate Validation Vulnerability (CVSS 5.9)
- CVE-2025-20147 — Cisco SD-WAN vManage Stored Cross-Site Scripting Vulnerability (CVSS 5.4)