Cisco
Cisco Catalyst Sd-wan Manager: vulnerabilidades y CVE
Cisco Catalyst Sd-wan Manager tiene 93 vulnerabilidades publicadas, 15 de ellas en los últimos 12 meses. 10 son críticas y 9 figuran en el catálogo de explotación activa de CISA.
CVE93
Últimos 12 meses15
Críticas10
Explotadas activamente9
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
🔴 Explotadas activamente (CISA KEV)
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-76504 | Crítica (9.8) | 1.6% | ⚠ Explotación activa | 30 sept 2026 | A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user. This… |
| CVE-2026-20262 | Media (6.5) | 28% | ⚠ Explotación activa | 15 jun 2026 | A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker to create a file or overwrite any file on the filesystem of an affected system. This… |
| CVE-2026-20245 | Alta (7.8) | 25% | ⚠ Explotación activa | 4 jun 2026 | A vulnerability in the CLI of Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an… |
| CVE-2026-20182 | Crítica (10) | 92% | ⚠ Explotación activa | 14 may 2026 | A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN… |
| CVE-2026-20133 | Alta (7.5) | 32% | ⚠ Explotación activa | 25 feb 2026 | A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system. This vulnerability is due to insufficient file system restrictions.… |
| CVE-2026-20122 | Media (5.4) | 25% | ⚠ Explotación activa | 25 feb 2026 | A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite arbitrary files on the local file system. To exploit this vulnerability, the attacker must have… |
| CVE-2026-20128 | Alta (7.5) | 7.1% | ⚠ Explotación activa | 25 feb 2026 | A vulnerability in the Data Collection Agent (DCA) feature of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain DCA user privileges on an affected system. This vulnerability is due to… |
| CVE-2026-20127 | Crítica (10) | 88% | ⚠ Explotación activa | 25 feb 2026 | A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN… |
| CVE-2022-20775 | Alta (7.8) | 12% | ⚠ Explotación activa | 30 sept 2022 | A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. This vulnerability is due to improper access controls on commands within the application CLI.… |
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-76504 | Crítica (9.8) | 1.6% | ⚠ Explotación activa | 30 sept 2026 | A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user. This… |
| CVE-2026-20294 | Media (6.5) | 0.13% | — | 5 ago 2026 | A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. This vulnerability… |
| CVE-2026-20262 | Media (6.5) | 28% | ⚠ Explotación activa | 15 jun 2026 | A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker to create a file or overwrite any file on the filesystem of an affected system. This… |
| CVE-2026-20245 | Alta (7.8) | 25% | ⚠ Explotación activa | 4 jun 2026 | A vulnerability in the CLI of Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an… |
| CVE-2026-20224 | Alta (8.6) | 1.0% | — | 14 may 2026 | A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenticated, remote attacker to read arbitrary files that are stored in an affected system. The attacker does… |
| CVE-2026-20210 | Media (5.4) | 0.19% | — | 14 may 2026 | A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker with read-only permissions to modify configurations and perform unauthorized actions… |
| CVE-2026-20209 | Media (5.4) | 0.19% | — | 14 may 2026 | A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker with read-only permissions to elevate their privileges from low to high and perform… |
| CVE-2026-20182 | Crítica (10) | 92% | ⚠ Explotación activa | 14 may 2026 | A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN… |
| CVE-2026-20108 | Media (5.4) | 0.16% | — | 25 mar 2026 | A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an… |
| CVE-2026-20133 | Alta (7.5) | 32% | ⚠ Explotación activa | 25 feb 2026 | A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system. This vulnerability is due to insufficient file system restrictions.… |
| CVE-2026-20129 | Crítica (9.8) | 0.74% | — | 25 feb 2026 | A vulnerability in the API user authentication of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain access to an affected system as a user who has the netadmin role. |
| CVE-2026-20128 | Alta (7.5) | 7.1% | ⚠ Explotación activa | 25 feb 2026 | A vulnerability in the Data Collection Agent (DCA) feature of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain DCA user privileges on an affected system. This vulnerability is due to… |
| CVE-2026-20127 | Crítica (10) | 88% | ⚠ Explotación activa | 25 feb 2026 | A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN… |
| CVE-2026-20126 | Alta (7.8) | 0.31% | — | 25 feb 2026 | A vulnerability in Cisco Catalyst SD-WAN Manager could allow an authenticated, local attacker with low privileges to gain root privileges on the underlying operating system. This vulnerability is due to an insufficient… |
| CVE-2026-20122 | Media (5.4) | 25% | ⚠ Explotación activa | 25 feb 2026 | A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite arbitrary files on the local file system. To exploit this vulnerability, the attacker must have… |
| CVE-2025-20216 | Media (4.3) | 0.34% | — | 7 may 2025 | A vulnerability in the web interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an unauthenticated, remote attacker to inject HTML into the browser of an authenticated user. This… |
| CVE-2025-20213 | Media (5.5) | 0.17% | — | 7 may 2025 | A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. To… |
| CVE-2025-20187 | Media (6.5) | 1.3% | — | 7 may 2025 | A vulnerability in the application data endpoints of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, remote attacker to write arbitrary files to an affected system. This… |
| CVE-2025-20157 | Media (5.9) | 0.29% | — | 7 may 2025 | A vulnerability in certificate validation processing of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an unauthenticated, remote attacker to gain access to sensitive information. This… |
| CVE-2025-20147 | Media (5.4) | 0.33% | — | 7 may 2025 | This vulnerability is due to improper sanitization of user input to the web-based management interface. An attacker could exploit this vulnerability by submitting a malicious script through the interface. A successful… |
| CVE-2025-20122 | Alta (7.8) | 0.15% | — | 7 may 2025 | A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to gain privileges of the root user on the underlying operating system. This… |
| CVE-2020-26066 | Media (6.5) | 0.59% | — | 18 nov 2024 | A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain read and write access to information that is stored on an affected system. The vulnerability is… |
| CVE-2021-1465 | Media (4.3) | 1.2% | — | 18 nov 2024 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a directory traversal attack and obtain read access to sensitive files on… |
| CVE-2021-1462 | Media (6.7) | 0.16% | — | 18 nov 2024 | A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to elevate privileges on an affected system. To exploit this vulnerability, an attacker would need to have a… |
| CVE-2021-1234 | Media (5.3) | 0.78% | — | 18 nov 2024 | A vulnerability in the cluster management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system. To be affected by this… |
| CVE-2021-1232 | Media (6.5) | 1.1% | — | 18 nov 2024 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to read arbitrary files on the underlying filesystem of an affected system. This… |
| CVE-2020-26074 | Alta (7.8) | 0.18% | — | 18 nov 2024 | A vulnerability in system file transfer functions of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to gain escalated privileges on the underlying operating system. The vulnerability is… |
| CVE-2020-26073 | Alta (7.5) | 13% | — | 18 nov 2024 | A vulnerability in the application data endpoints of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper… |
| CVE-2020-26071 | Alta (8.4) | 0.19% | — | 18 nov 2024 | A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to create or overwrite arbitrary files on an affected device, which could result in a denial of service (DoS)… |
| CVE-2021-1491 | Media (6.5) | 1.3% | — | 15 nov 2024 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to read arbitrary files on the underlying file system of the device. This… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.