CS
Product
Catalyst SD-WAN Manager
On CISA KEVExploited in the wild
92
CVEs
9
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 10High 37Medium 45Low 0
Watch
Add Catalyst SD-WAN Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-20182 In wildKEV | 10.0 | May 14 | Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability Affected: before 20.9.9.1; 20.10 before 20.12.5.4; 20.12.6 before 20.12.6.2; 20.13 before 20.15.4.4; 20.15.5 before 20.15.5.2; 20.16 before 20.18.2.2; +2 more |
| CVE-2026-20127 In wildKEV | 10.0 | Feb 25 | Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability Affected: before 20.9.8.2; 20.11 before 20.12.5.3; 20.13 before 20.15.4.2; 20.16 before 20.18.2.1; 20.12.6 |
| CVE-2026-76504 In wildKEV | 9.8 | Sep 30 | Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability Affected: before 20.9.10.1; 20.12 before 20.12.8.2; 20.15 before 20.15.6.1; 20.18 before 20.18.4.1; 26.1 before 26.1.2.1; 26.2 |
| CVE-2026-20129 | 9.8 | Feb 25 | A vulnerability in the API user authentication of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain access to an affected system as a user who… Affected: before 20.9.8.2; 20.11 before 20.12.5.3; 20.13 before 20.15.4.2; 20.16 before 20.18; 20.12.6 |
| CVE-2023-20252 | 9.8 | Sep 27 | A vulnerability in the Security Assertion Markup Language (SAML) APIs of Cisco Catalyst SD-WAN Manager Software could allow an unauthenticated, remote attacker to gain… Affected: 20.9.3.2; 20.11.1.2 |
| CVE-2021-1468 | 9.8 | May 6 | Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or… Affected: 20.4 before 20.4.1; 20.5 before 20.5.1 |
| CVE-2021-1479 | 9.8 | Apr 8 | Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or allow an authenticated, local attacker to… Affected: 20.4 before 20.4.1 |
| CVE-2021-1301 | 9.8 | Jan 20 | Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device Affected: All versions, or not specified |
| CVE-2021-1300 | 9.8 | Jan 20 | Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device Affected: All versions, or not specified |
| CVE-2023-20214 | 9.1 | Aug 3 | A vulnerability in the request authentication validation for the REST API of Cisco SD-WAN vManage software could allow an unauthenticated, remote attacker to gain read permissions… Affected: 20.6.4 before 20.6.4.2; 20.6.5 before 20.6.5.5; 20.7 before 20.9.3.2; 20.11 before 20.11.1.2; 20.6.3.3 |
Showing 10