8.6

CVE-2026-20224

Cisco Catalyst SD-WAN Manager XML External Entity Injection Vulnerability

A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenticated, remote attacker to read arbitrary files that are stored in an affected system. The attacker does not need to have valid user credentials.

This vulnerability is due to improper handling of XML External Entity (XXE) entries when parsing an XML file. An attacker could exploit this vulnerability by sending a crafted request to an affected system. A successful exploit could allow the attacker to read arbitrary files that are stored in the affected system.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Catalyst Sd-wan Manager Version < 20.9.9.1
Cisco ≫ Catalyst Sd-wan Manager Version >= 20.10 < 20.12.5.4
Cisco ≫ Catalyst Sd-wan Manager Version >= 20.12.6 < 20.12.6.2
Cisco ≫ Catalyst Sd-wan Manager Version >= 20.13 < 20.15.4.4
Cisco ≫ Catalyst Sd-wan Manager Version >= 20.15.5 < 20.15.5.2
Cisco ≫ Catalyst Sd-wan Manager Version >= 20.16 < 20.18.2.2
Cisco ≫ Catalyst Sd-wan Manager Version >= 26.1 < 26.1.1.1
Cisco ≫ Catalyst Sd-wan Manager Version20.12.7
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.7% 0.483
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
psirt@cisco.com 8.6 3.9 4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa-EHchtZk
Not Applicable
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-mltvnps2-JxpWm7R
Vendor Advisory