SV
Product
Sd-wan Vbond Orchestrator
On CISA KEVExploited in the wild
27
CVEs
3
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 4High 18Medium 5Low 0
Watch
Add Sd-wan Vbond Orchestrator to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-20182 In wildKEV | 10.0 | May 14 | Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability Affected: before 20.9.9.1; 20.10 before 20.12.5.4; 20.12.6 before 20.12.6.2; 20.13 before 20.15.4.4; 20.15.5 before 20.15.5.2; 20.16 before 20.18.2.2; +2 more |
| CVE-2026-20127 In wildKEV | 10.0 | Feb 25 | Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability Affected: before 20.9.8.2; 20.11 before 20.12.5.3; 20.13 before 20.15.4.2; 20.16 before 20.18.2.1; 20.12.6 |
| CVE-2022-20775 In wildKEV | 7.8 | Sep 30 | Cisco SD-WAN Software Privilege Escalation Vulnerability Affected: before 20.6.3; 20.7 before 20.7.2; 20.8 |
| CVE-2021-1301 | 9.8 | Jan 20 | Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device Affected: All versions, or not specified |
| CVE-2021-1300 | 9.8 | Jan 20 | Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device Affected: All versions, or not specified |
| CVE-2021-1299 | 8.8 | Jan 20 | Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the… Affected: All versions, or not specified |
| CVE-2021-1298 | 8.8 | Jan 20 | Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the… Affected: All versions, or not specified |
| CVE-2021-1279 | 8.6 | Jan 20 | Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device Affected: All versions, or not specified |
| CVE-2021-1274 | 8.6 | Jan 20 | Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device Affected: All versions, or not specified |
| CVE-2021-1273 | 8.6 | Jan 20 | Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device Affected: All versions, or not specified |
| CVE-2022-20818 | 7.8 | Sep 30 | Cisco SD-WAN Software Privilege Escalation Vulnerabilities Affected: before 20.9 |
| CVE-2022-20716 | 7.8 | Apr 15 | A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain escalated privileges Affected: All versions, or not specified |
| CVE-2021-1528 | 7.8 | Jun 4 | A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges on an affected system Affected: 20.4 before 20.4.2; 20.5 before 20.5.1 |
| CVE-2021-1514 | 7.8 | May 6 | A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be executed with Administrator privileges on the… Affected: before 18.3; 20.1 before 20.1.1; 20.3 before 20.3.1; 20.4 before 20.4.1; 20.5 before 20.5.1 |
| CVE-2021-1263 | 7.8 | Jan 20 | Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the… Affected: All versions, or not specified |
| CVE-2021-1262 | 7.8 | Jan 20 | Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the… Affected: All versions, or not specified |
| CVE-2021-1261 | 7.8 | Jan 20 | Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the… Affected: All versions, or not specified |
| CVE-2021-1260 | 7.8 | Jan 20 | Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the… Affected: All versions, or not specified |
| CVE-2021-1513 | 7.5 | May 6 | A vulnerability in the vDaemon process of Cisco SD-WAN Software could allow an unauthenticated, remote attacker to cause a device to reload, resulting in a denial of service (DoS)… Affected: All versions, or not specified |
| CVE-2021-1241 | 7.5 | Jan 20 | Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device Affected: All versions, or not specified |
| CVE-2021-1278 | 7.5 | Jan 20 | Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device Affected: All versions, or not specified |
| CVE-2022-20850 | 7.1 | Sep 30 | Cisco SD-WAN Arbitrary File Deletion Vulnerability Affected: before 18.4.5 |
| CVE-2022-20930 | 6.7 | Sep 30 | Cisco SD-WAN Software Arbitrary File Corruption Vulnerability Affected: before 20.6.2; 20.8; 20.9 |
| CVE-2021-1512 | 6.0 | May 6 | A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in the underlying file system of an affected system Affected: All versions, or not specified |
| CVE-2021-1546 | 5.5 | Sep 23 | A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to access sensitive information Affected: 18.4 before 20.4.2; 20.5 before 20.5.2; 20.6 before 20.6.1 |
| CVE-2021-1233 | 4.4 | Jan 20 | A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to access sensitive information on an affected device Affected: All versions, or not specified |
| CVE-2021-1305 | 4.3 | Jan 20 | Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization and modify… Affected: All versions, or not specified |
Showing 27