Vulnerabilities
Summary — last 7 days
New vulnerabilities3,351▲ 378 vs. last week
Critical / high1,495▲ 137 vs. last week
New active exploitation (KEV)7▼ 3 vs. last week
Unscored (no CVSS)592▲ 120 vs. last week
22 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Analyzed | High (7.8) | 25% | ⚠ Active exploitation | Cisco Catalyst Sd-wan ManagerCisco Sd-wan Vsmart Controller | 6/4/2026 | 7/23/2026 | A vulnerability in the CLI of Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an authenticated, local attacker to execute arbitrary commands as root by supplying a crafted file to… | |
| Analyzed | Critical (10) | 92% | ⚠ Active exploitation | Cisco Catalyst Sd-wan ManagerCisco Sd-wan Vbond OrchestratorCisco Sd-wan Vsmart Controller | 5/14/2026 | 6/17/2026 | A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an unauthenticated, remote attacker to bypass authentication and obtain… | |
| Analyzed | Critical (10) | 88% | ⚠ Active exploitation | Cisco Catalyst Sd-wan ManagerCisco Sd-wan Vbond OrchestratorCisco Sd-wan Vsmart Controller | 2/25/2026 | 6/17/2026 | A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an unauthenticated, remote attacker to bypass authentication and obtain… | |
| Modified | Medium (6.7) | 0.26% | — | Cisco Catalyst Sd-wan ManagerCisco Sd-wan Vbond OrchestratorCisco Sd-wan VmanageCisco Sd-wan Vsmart Controller+1 | 9/30/2022 | 6/17/2026 | A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite and possibly corrupt files on an affected system. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by injecting arbitrary commands that are executed as… | |
| Modified | High (7.1) | 0.21% | — | Cisco Sd-wan Vbond OrchestratorCisco Sd-wan VmanageCisco Sd-wan Vsmart ControllerCisco IOS XE Sd-wan+1 | 9/30/2022 | 6/17/2026 | A vulnerability in the CLI of stand-alone Cisco IOS XE SD-WAN Software and Cisco SD-WAN Software could allow an authenticated, local attacker to delete arbitrary files from the file system of an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by… | |
| Modified | High (7.8) | 0.63% | — | Cisco Sd-wan Vbond OrchestratorCisco Sd-wan VmanageCisco Sd-wan Vsmart ControllerCisco Sd-wan | 9/30/2022 | 6/17/2026 | Multiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. These vulnerabilities are due to improper access controls on commands within the application CLI. An attacker could exploit these vulnerabilities by running a malicious command on the… | |
| Analyzed | High (7.8) | 12% | ⚠ Active exploitation | Cisco Catalyst Sd-wan ManagerCisco Sd-wan Vbond OrchestratorCisco Sd-wan Vedge CloudCisco Sd-wan Vsmart Controller+1 | 9/30/2022 | 6/17/2026 | A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. This vulnerability is due to improper access controls on commands within the application CLI. An attacker could exploit this vulnerability by running a maliciously crafted command on the… | |
| Modified | High (7.8) | 0.22% | — | Cisco Catalyst Sd-wan ManagerCisco Sd-wan SolutionCisco Sd-wan Vbond OrchestratorCisco Sd-wan Vedge Cloud+3 | 4/15/2022 | 6/17/2026 | A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain escalated privileges. This vulnerability is due to improper access control on files within the affected system. A local attacker could exploit this vulnerability by modifying certain files on the vulnerable device.… | |
| Modified | High (7.5) | 1.4% | — | Cisco IOS XE Sd-wanCisco Sd-wan FirmwareCisco Sd-wan Vsmart Controller FirmwareCisco Catalyst Sd-wan Manager+1 | 1/20/2021 | 6/17/2026 | Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory. | |
| Modified | Medium (4.3) | 1.3% | — | Cisco IOS XE Sd-wanCisco Sd-wan FirmwareCisco Sd-wan Vsmart Controller FirmwareCisco Sd-wan Vbond Orchestrator | 1/20/2021 | 6/17/2026 | Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization and modify the configuration of an affected system, gain access to sensitive information, and view information that they are not authorized to access.… | |
| Modified | Critical (9.8) | 2.1% | — | Cisco IOS XE Sd-wanCisco Sd-wan FirmwareCisco Sd-wan Vsmart Controller FirmwareCisco Catalyst Sd-wan Manager+1 | 1/20/2021 | 6/17/2026 | Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory. | |
| Modified | Critical (9.8) | 2.1% | — | Cisco IOS XE Sd-wanCisco Sd-wan FirmwareCisco Sd-wan Vsmart Controller FirmwareCisco Catalyst Sd-wan Manager+1 | 1/20/2021 | 6/17/2026 | Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory. | |
| Modified | High (8.8) | 2.4% | — | Cisco Sd-wan FirmwareCisco Sd-wan Vsmart Controller FirmwareCisco Catalyst Sd-wan ManagerCisco Sd-wan Vbond Orchestrator | 1/20/2021 | 6/17/2026 | Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root privileges on the device. For more information about these vulnerabilities, see the Details section… | |
| Modified | High (8.8) | 2.4% | — | Cisco Sd-wan FirmwareCisco Sd-wan Vsmart Controller FirmwareCisco Catalyst Sd-wan ManagerCisco Sd-wan Vbond Orchestrator | 1/20/2021 | 6/17/2026 | Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root privileges on the device. For more information about these vulnerabilities, see the Details section… | |
| Modified | High (8.6) | 1.4% | — | Cisco IOS XE Sd-wanCisco Sd-wan FirmwareCisco Sd-wan Vsmart Controller FirmwareCisco Catalyst Sd-wan Manager+1 | 1/20/2021 | 6/17/2026 | Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory. | |
| Modified | High (7.5) | 1.7% | — | Cisco IOS XE Sd-wanCisco Sd-wan FirmwareCisco Sd-wan Vsmart Controller FirmwareCisco Catalyst Sd-wan Manager+1 | 1/20/2021 | 6/17/2026 | Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory. | |
| Modified | High (8.6) | 1.9% | — | Cisco IOS XE Sd-wanCisco Sd-wan FirmwareCisco Sd-wan Vsmart Controller FirmwareCisco Catalyst Sd-wan Manager+1 | 1/20/2021 | 6/17/2026 | Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory. | |
| Modified | High (8.6) | 1.4% | — | Cisco IOS XE Sd-wanCisco Sd-wan FirmwareCisco Sd-wan Vsmart Controller FirmwareCisco Catalyst Sd-wan Manager+1 | 1/20/2021 | 6/17/2026 | Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory. | |
| Modified | High (7.8) | 1.4% | — | Cisco Sd-wan FirmwareCisco Sd-wan Vsmart Controller FirmwareCisco Catalyst Sd-wan ManagerCisco Sd-wan Vbond Orchestrator | 1/20/2021 | 6/17/2026 | Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root privileges on the device. For more information about these vulnerabilities, see the Details section… | |
| Modified | High (7.8) | 1.3% | — | Cisco Sd-wan FirmwareCisco Sd-wan Vsmart Controller FirmwareCisco Catalyst Sd-wan ManagerCisco Sd-wan Vbond Orchestrator | 1/20/2021 | 6/17/2026 | Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root privileges on the device. For more information about these vulnerabilities, see the Details section… | |
| Modified | High (7.8) | 1.4% | — | Cisco Sd-wan FirmwareCisco Sd-wan Vsmart Controller FirmwareCisco Catalyst Sd-wan ManagerCisco Sd-wan Vbond Orchestrator | 1/20/2021 | 6/17/2026 | Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root privileges on the device. For more information about these vulnerabilities, see the Details section… | |
| Modified | High (7.8) | 1.4% | — | Cisco Sd-wan FirmwareCisco Sd-wan Vsmart Controller FirmwareCisco Catalyst Sd-wan ManagerCisco Sd-wan Vbond Orchestrator | 1/20/2021 | 6/17/2026 | Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root privileges on the device. For more information about these vulnerabilities, see the Details section… |