Cisco

Catalyst Sd-wan Manager

93 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2026-20262

Warnung Medienbericht
  • EPSS 7.68%
  • Veröffentlicht 15.06.2026 16:21:09
  • Zuletzt bearbeitet 16.06.2026 12:54:55

A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker to create a file or overwrite any file on the filesystem of an affected system. This vulnerability exists becaus...

7.8

CVE-2026-20245

Warnung Medienbericht
  • EPSS 25.32%
  • Veröffentlicht 04.06.2026 22:33:00
  • Zuletzt bearbeitet 10.06.2026 12:59:09

A vulnerability in the CLI of Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an authenticated, local attacker t...

8.6

CVE-2026-20224

  • EPSS 0.7%
  • Veröffentlicht 14.05.2026 16:08:46
  • Zuletzt bearbeitet 29.06.2026 14:51:28

A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenticated, remote attacker to read arbitrary files that are stored in an affected system. The attacker does not need to have valid user cred...

5.4

CVE-2026-20210

Medienbericht
  • EPSS 0.19%
  • Veröffentlicht 14.05.2026 16:08:46
  • Zuletzt bearbeitet 29.06.2026 17:35:57

A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker with read-only permissions to modify configurations and perform unauthorized actions on an affected system. This...

5.4

CVE-2026-20209

Medienbericht
  • EPSS 0.19%
  • Veröffentlicht 14.05.2026 16:08:26
  • Zuletzt bearbeitet 29.06.2026 17:33:57

A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker with read-only permissions to elevate their privileges from low to high and perform actions as a high-privileged us...

10

CVE-2026-20182

Warnung Medienbericht
  • EPSS 88.5%
  • Veröffentlicht 14.05.2026 16:08:25
  • Zuletzt bearbeitet 16.06.2026 19:16:34

May 2026: This security advisory provides the details and fix information for a vulnerability that was discovered and fixed after the was disclosed in February 2026. This new advisory is for a new vulnerability in the control connection handshaking....

5.4

CVE-2026-20108

  • EPSS 0.16%
  • Veröffentlicht 25.03.2026 16:16:14
  • Zuletzt bearbeitet 29.06.2026 18:10:12

A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. This vulnera...

5.4

CVE-2026-20122

Warnung Medienbericht
  • EPSS 7.02%
  • Veröffentlicht 25.02.2026 16:14:21
  • Zuletzt bearbeitet 21.04.2026 11:59:56

A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite arbitrary files on the local file system. To exploit this vulnerability, the attacker must have valid read-only credentials with AP...

10

CVE-2026-20127

Warnung Medienbericht
  • EPSS 57.79%
  • Veröffentlicht 25.02.2026 16:14:20
  • Zuletzt bearbeitet 16.06.2026 19:16:34

A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an unauthentica...

7.5

CVE-2026-20128

Warnung Medienbericht
  • EPSS 5.27%
  • Veröffentlicht 25.02.2026 16:14:12
  • Zuletzt bearbeitet 21.04.2026 12:48:20

A vulnerability in the Data Collection Agent (DCA) feature of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain DCA user privileges on an affected system. This vulnerability is due to the presence of a credentia...