CVE-2026-20122
📛 CVE Title
Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability
Description
A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite arbitrary files on the local file system. To exploit this vulnerability, the attacker must have valid read-only credentials with API access on the affected system. This vulnerability is due to improper file handling on the API interface of an affected system. An attacker could exploit this vulnerability by uploading a malicious file on the local file system. A successful exploit could allow the attacker to overwrite arbitrary files on the affected system and gain vmanage user privileges.
Overview
- State
- PUBLISHED
- Assigner (CNA)
- cisco
- CVSS severity
- MEDIUM
- CVSS score
- 5.4 / 10
- CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N- Effective score
- 5.4 / 10 MEDIUM source: CNA overview
- CWE(s)
-
CWE-648 - Reserved
- 2025-10-08
- Published
- 2026-02-25 16:14 UTC
- Last updated
- 2026-04-21 03:55 UTC
- Source
- https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/20xxx/CVE-2026-20122.json
CISA Known Exploited Vulnerabilities CISA KEV
CISA has confirmed in-the-wild exploitation of this CVE. Federal agencies must remediate by the due date below; private orgs should treat it as priority-1.
- Vulnerability name
- Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability
- Vendor / project
- Cisco
- Product
- Catalyst SD-WAN Manger
- Date added to KEV
- 2026-04-20
- Remediation due
- 2026-04-23
- Required action
- Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.
- Ransomware campaign use
- Unknown
- CISA notes
- CISA Mitigation Instructions: https://www.cisa.gov/news-events/directives/ed-26-03-mitigate-vulnerabilities-cisco-sd-wan-systems ; https://www.cisa.gov/news-events/directives/supplemental-direction-ed-26-03-hunt-and-hardening-guidance-cisco-sd-wan-systems ; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v ; https://nvd.nist.gov/vuln/detail/CVE-2026-20122
- CISA listing
- www.cisa.gov/known-exploited-vulnerabilities-catalog
NVD triage scoring NVD CVE 2.0
Layer NVD adds on top of the CNA's CVE record — published / last-modified timestamps, exploitability / impact subscores, and the FIRST.org EPSS probability that this CVE will be exploited in the wild in the next 30 days.
- NVD published
- 2026-02-25 17:25:28 UTC
- NVD last modified
- 2026-04-21 13:00:03 UTC
- NVD CVSS v3.1
- 5.4 / 10 MEDIUM source: psirt@cisco.com
- NVD CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N- Exploitability subscore
- 2.8 / 10
- Impact subscore
- 2.5 / 10
- EPSS score
- 0.0132 (probability of exploitation in next 30 days)
- EPSS percentile
- 80.08% vs all CVEs — higher = more likely to be exploited, as of 2026-05-24
NVD / KEV / EPSS data refreshed 2026-05-25 04:17 UTC. Re-run the 🛰 Backfill from NVD button above to refresh.
European Union Vulnerability Database ENISA EUVD
ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.
- EUVD ID
-
EUVD-2026-8673 - Assigner
- cisco
- Published
- Feb 25, 2026, 4:14:21 PM
- Updated
- Apr 21, 2026, 3:55:33 AM
- EUVD base score (CVSS 3.1)
-
5.4 / 10
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N - EUVD-reported EPSS
- 1.3200
- Vendors
- Cisco
- Products
-
Cisco Catalyst SD-WAN Manager (20.6.6)Cisco Catalyst SD-WAN Manager (20.3.2)Cisco Catalyst SD-WAN Manager (20.7.1.0.2)Cisco Catalyst SD-WAN Manager (20.6.5)Cisco Catalyst SD-WAN Manager (20.6.5.1.10)Cisco Catalyst SD-WAN Manager (20.6.5.2.3)Cisco Catalyst SD-WAN Manager (20.9.4_LI_Images)Cisco Catalyst SD-WAN Manager (20.9.8)Cisco Catalyst SD-WAN Manager (20.3.3.0.16)Cisco Catalyst SD-WAN Manager (20.9.3.0.24)Cisco Catalyst SD-WAN Manager (20.6.5.1.3)Cisco Catalyst SD-WAN Manager (18.3.6)Cisco Catalyst SD-WAN Manager (20.16.1_LI_Images)Cisco Catalyst SD-WAN Manager (20.6.5.1.6)Cisco Catalyst SD-WAN Manager (20.9.3.0.20)Cisco Catalyst SD-WAN Manager (20.9.6_LI_Images)Cisco Catalyst SD-WAN Manager (18.3.7)Cisco Catalyst SD-WAN Manager (20.3.3.1.1)Cisco Catalyst SD-WAN Manager (20.9.5.1)Cisco Catalyst SD-WAN Manager (20.4.2.2.8)Cisco Catalyst SD-WAN Manager (20.9.4.1)Cisco Catalyst SD-WAN Manager (20.6.3.0.14)Cisco Catalyst SD-WAN Manager (20.12.5)Cisco Catalyst SD-WAN Manager (20.6.3.0.39)Cisco Catalyst SD-WAN Manager (20.6.8)Cisco Catalyst SD-WAN Manager (20.6.3.0.33)Cisco Catalyst SD-WAN Manager (20.9.1)Cisco Catalyst SD-WAN Manager (20.12.4.1_LI_Images)Cisco Catalyst SD-WAN Manager (20.12.5.1.01)Cisco Catalyst SD-WAN Manager (20.3.4.0.25)Cisco Catalyst SD-WAN Manager (20.6.5.1)Cisco Catalyst SD-WAN Manager (20.6.5.1.9)Cisco Catalyst SD-WAN Manager (20.1.3.1)Cisco Catalyst SD-WAN Manager (17.2.7)Cisco Catalyst SD-WAN Manager (20.6.1.1)Cisco Catalyst SD-WAN Manager (18.4.1)Cisco Catalyst SD-WAN Manager (20.12.5_LI_Images)Cisco Catalyst SD-WAN Manager (20.9.5.2.16)Cisco Catalyst SD-WAN Manager (20.3.2_929)Cisco Catalyst SD-WAN Manager (20.3.7)Cisco Catalyst SD-WAN Manager (20.12.2)Cisco Catalyst SD-WAN Manager (20.12.1_LI_Images)Cisco Catalyst SD-WAN Manager (20.9.4.1.3)Cisco Catalyst SD-WAN Manager (20.3.4.1)Cisco Catalyst SD-WAN Manager (20.10.1.1)Cisco Catalyst SD-WAN Manager (20.9.3.0.25)Cisco Catalyst SD-WAN Manager (20.6.3.3)Cisco Catalyst SD-WAN Manager (18.4.303)Cisco Catalyst SD-WAN Manager (18.3.5)Cisco Catalyst SD-WAN Manager (20.7.1)Cisco Catalyst SD-WAN Manager (20.6.1.2)Cisco Catalyst SD-WAN Manager (20.6.3.0.19)Cisco Catalyst SD-WAN Manager (19.2.097)Cisco Catalyst SD-WAN Manager (20.6.5.1.2)Cisco Catalyst SD-WAN Manager (20.6.4.2)Cisco Catalyst SD-WAN Manager (18.4.302)Cisco Catalyst SD-WAN Manager (20.3.2_937)Cisco Catalyst SD-WAN Manager (18.3.1.1)Cisco Catalyst SD-WAN Manager (20.12.2_LI_Images)Cisco Catalyst SD-WAN Manager (20.6.2)Cisco Catalyst SD-WAN Manager (19.3.0)Cisco Catalyst SD-WAN Manager (20.6.0.18.3)Cisco Catalyst SD-WAN Manager (20.9.2.3)Cisco Catalyst SD-WAN Manager (20.3.3.0.14)Cisco Catalyst SD-WAN Manager (20.6.5.2.4)Cisco Catalyst SD-WAN Manager (20.3.3.0.17)Cisco Catalyst SD-WAN Manager (20.3.4)Cisco Catalyst SD-WAN Manager (20.4.1.0.1)Cisco Catalyst SD-WAN Manager (20.3.3.0.18)Cisco Catalyst SD-WAN Manager (20.9.2.1)Cisco Catalyst SD-WAN Manager (19.2.3)Cisco Catalyst SD-WAN Manager (19.0.1a)Cisco Catalyst SD-WAN Manager (20.6.3.0.25)Cisco Catalyst SD-WAN Manager (20.1.12)Cisco Catalyst SD-WAN Manager (20.6.4.1)Cisco Catalyst SD-WAN Manager (20.11.1_LI_Images)Cisco Catalyst SD-WAN Manager (17.2.8)Cisco Catalyst SD-WAN Manager (20.3.2_925)Cisco Catalyst SD-WAN Manager (20.5.0.1.1)Cisco Catalyst SD-WAN Manager (20.6.4)Cisco Catalyst SD-WAN Manager (20.5.1.1)Cisco Catalyst SD-WAN Manager (20.6.3.0.10)Cisco Catalyst SD-WAN Manager (18.4.3)Cisco Catalyst SD-WAN Manager (18.3.3)Cisco Catalyst SD-WAN Manager (20.6.3.0.32)Cisco Catalyst SD-WAN Manager (20.9.7.1_LI _Images)Cisco Catalyst SD-WAN Manager (20.9.5.2.14)Cisco Catalyst SD-WAN Manager (18.4.6)Cisco Catalyst SD-WAN Manager (20.12.4)Cisco Catalyst SD-WAN Manager (19.2.4.0.9)Cisco Catalyst SD-WAN Manager (20.15.2)Cisco Catalyst SD-WAN Manager (19.2.2)Cisco Catalyst SD-WAN Manager (20.9.3.0.18)Cisco Catalyst SD-WAN Manager (20.1.2)Cisco Catalyst SD-WAN Manager (20.6.3.2)Cisco Catalyst SD-WAN Manager (20.9.3.1)Cisco Catalyst SD-WAN Manager (20.3.4.0.20)Cisco Catalyst SD-WAN Manager (20.10.1)Cisco Catalyst SD-WAN Manager (20.4.1)Cisco Catalyst SD-WAN Manager (20.6.4.0.4)Cisco Catalyst SD-WAN Manager (20.4.2.1.1)Cisco Catalyst SD-WAN Manager (20.6.3.0.31)Cisco Catalyst SD-WAN Manager (20.3.4.0.5)Cisco Catalyst SD-WAN Manager (20.6.5.2.1)Cisco Catalyst SD-WAN Manager (20.7.1.1)Cisco Catalyst SD-WAN Manager (20.3.2.1_927)Cisco Catalyst SD-WAN Manager (20.6.3.0.23)Cisco Catalyst SD-WAN Manager (20.3.4.0.11)Cisco Catalyst SD-WAN Manager (20.3.4.0.26)Cisco Catalyst SD-WAN Manager (20.3.4.0.24)Cisco Catalyst SD-WAN Manager (20.9.3.0.5)Cisco Catalyst SD-WAN Manager (20.6.5.2.8)Cisco Catalyst SD-WAN Manager (20.15.1)Cisco Catalyst SD-WAN Manager (20.12.501)Cisco Catalyst SD-WAN Manager (20.3.4.0.19)Cisco Catalyst SD-WAN Manager (19.2.4.0.1)Cisco Catalyst SD-WAN Manager (20.3.4.0.9)Cisco Catalyst SD-WAN Manager (20.3.5.0.9)Cisco Catalyst SD-WAN Manager (18.3.6.1)Cisco Catalyst SD-WAN Manager (20.3.2.0.6)Cisco Catalyst SD-WAN Manager (18.3.3.1)Cisco Catalyst SD-WAN Manager (20.6.3.0.27)Cisco Catalyst SD-WAN Manager (19.0.0)Cisco Catalyst SD-WAN Manager (20.12.6_LI_Images)Cisco Catalyst SD-WAN Manager (20.4.2.2.4)Cisco Catalyst SD-WAN Manager (20.9.1_LI_Images)Cisco Catalyst SD-WAN Manager (20.4.1.2)Cisco Catalyst SD-WAN Manager (20.7.2)Cisco Catalyst SD-WAN Manager (20.15.4.1)Cisco Catalyst SD-WAN Manager (17.2.4)Cisco Catalyst SD-WAN Manager (20.9.5.3)Cisco Catalyst SD-WAN Manager (20.6.3.0.5)Cisco Catalyst SD-WAN Manager (20.15.3.1)Cisco Catalyst SD-WAN Manager (20.16.1)Cisco Catalyst SD-WAN Manager (20.5.1)Cisco Catalyst SD-WAN Manager (20.12.6)Cisco Catalyst SD-WAN Manager (20.6.2.2.3)Cisco Catalyst SD-WAN Manager (20.10.1.2)Cisco Catalyst SD-WAN Manager (20.12.5.2)Cisco Catalyst SD-WAN Manager (20.4.2.2.1)Cisco Catalyst SD-WAN Manager (20.9.2)Cisco Catalyst SD-WAN Manager (20.10.1_LI_Images)Cisco Catalyst SD-WAN Manager (20.6.1.0.1)Cisco Catalyst SD-WAN Manager (20.11.1.2)Cisco Catalyst SD-WAN Manager (20.5.1.0.1)Cisco Catalyst SD-WAN Manager (20.9.7)Cisco Catalyst SD-WAN Manager (20.9.5)Cisco Catalyst SD-WAN Manager (20.11.1.1)Cisco Catalyst SD-WAN Manager (20.3.3.0.8)Cisco Catalyst SD-WAN Manager (19.2.4)Cisco Catalyst SD-WAN Manager (20.6.3.0.51)Cisco Catalyst SD-WAN Manager (20.9.1EFT2)Cisco Catalyst SD-WAN Manager (20.6.5.4)Cisco Catalyst SD-WAN Manager (20.6.2.0.4)Cisco Catalyst SD-WAN Manager (20.9.1.1)Cisco Catalyst SD-WAN Manager (20.6.5.2)Cisco Catalyst SD-WAN Manager (20.6.0.18.4)Cisco Catalyst SD-WAN Manager (20.3.4.3)Cisco Catalyst SD-WAN Manager (20.5.1.2)Cisco Catalyst SD-WAN Manager (17.2.9)Cisco Catalyst SD-WAN Manager (20.9.3.0.29)Cisco Catalyst SD-WAN Manager (19.2.0)Cisco Catalyst SD-WAN Manager (20.3.5.0.7)Cisco Catalyst SD-WAN Manager (20.9.3.0.3)Cisco Catalyst SD-WAN Manager (17.2.6)Cisco Catalyst SD-WAN Manager (20.6.3.4)Cisco Catalyst SD-WAN Manager (20.6.3.1)Cisco Catalyst SD-WAN Manager (20.4.2)Cisco Catalyst SD-WAN Manager (20.9.3.0.7)Cisco Catalyst SD-WAN Manager (20.3.4.1.2)Cisco Catalyst SD-WAN Manager (20.14.1)Cisco Catalyst SD-WAN Manager (18.4.501_ES)Cisco Catalyst SD-WAN Manager (20.4.1.0.01)Cisco Catalyst SD-WAN Manager (20.6.3.0.41)Cisco Catalyst SD-WAN Manager (20.6.3.1.1)Cisco Catalyst SD-WAN Manager (17.2.5)Cisco Catalyst SD-WAN Manager (20.9.5.2.7)Cisco Catalyst SD-WAN Manager (20.6.1)Cisco Catalyst SD-WAN Manager (20.6.5.1.13)Cisco Catalyst SD-WAN Manager (20.9.3.2)Cisco Catalyst SD-WAN Manager (20.12.3)Cisco Catalyst SD-WAN Manager (18.4.5)Cisco Catalyst SD-WAN Manager (20.15.1_LI_Images)Cisco Catalyst SD-WAN Manager (20.12.4_LI_Images)Cisco Catalyst SD-WAN Manager (19.2.098)Cisco Catalyst SD-WAN Manager (20.3.3.1)Cisco Catalyst SD-WAN Manager (20.4.1.1)Cisco Catalyst SD-WAN Manager (20.12.4_Monthly_ES5)Cisco Catalyst SD-WAN Manager (20.3.2.1_930)Cisco Catalyst SD-WAN Manager (20.9.5.2.21)Cisco Catalyst SD-WAN Manager (20.3.1)Cisco Catalyst SD-WAN Manager (20.3.2_928)Cisco Catalyst SD-WAN Manager (20.9.5.3_LI_Images)Cisco Catalyst SD-WAN Manager (20.4.2.3)Cisco Catalyst SD-WAN Manager (20.9.7.1)Cisco Catalyst SD-WAN Manager (20.9.3.0.12)Cisco Catalyst SD-WAN Manager (20.9.5.2_LI_Images)Cisco Catalyst SD-WAN Manager (20.3.4.2)Cisco Catalyst SD-WAN Manager (20.9.4.1.1)Cisco Catalyst SD-WAN Manager (20.9.5.2.13)Cisco Catalyst SD-WAN Manager (20.6.2.1)Cisco Catalyst SD-WAN Manager (20.3.3.1.7)Cisco Catalyst SD-WAN Manager (20.6.3.0.45)Cisco Catalyst SD-WAN Manager (20.9.3.0.17)Cisco Catalyst SD-WAN Manager (20.9.4)Cisco Catalyst SD-WAN Manager (20.9.3.0.23)Cisco Catalyst SD-WAN Manager (20.3.3.0.2)Cisco Catalyst SD-WAN Manager (18.2.0)Cisco Catalyst SD-WAN Manager (20.9.3.0.16)Cisco Catalyst SD-WAN Manager (18.4.4)Cisco Catalyst SD-WAN Manager (20.9.6.0.3)Cisco Catalyst SD-WAN Manager (19.2.929)Cisco Catalyst SD-WAN Manager (20.3.814)Cisco Catalyst SD-WAN Manager (20.9.5.1.4)Cisco Catalyst SD-WAN Manager (20.3.2.0.5)Cisco Catalyst SD-WAN Manager (20.9.5.2)Cisco Catalyst SD-WAN Manager (20.12.3.1)Cisco Catalyst SD-WAN Manager (20.3.3.0.4)Cisco Catalyst SD-WAN Manager (19.2.4.0.8)Cisco Catalyst SD-WAN Manager (20.3.4.0.1)Cisco Catalyst SD-WAN Manager (20.15.4)Cisco Catalyst SD-WAN Manager (20.5.1.0.2)Cisco Catalyst SD-WAN Manager (20.13.1_LI_Images)Cisco Catalyst SD-WAN Manager (20.18.1)Cisco Catalyst SD-WAN Manager (19.1.0)Cisco Catalyst SD-WAN Manager (20.9.7_LI _Images)Cisco Catalyst SD-WAN Manager (20.12.4.0.4)Cisco Catalyst SD-WAN Manager (20.6.5.5)Cisco Catalyst SD-WAN Manager (20.4.1.0.02)Cisco Catalyst SD-WAN Manager (19.2.1)Cisco Catalyst SD-WAN Manager (20.6.3.0.40)Cisco Catalyst SD-WAN Manager (20.9.3.2_LI_Images)Cisco Catalyst SD-WAN Manager (20.6.2.2.2)Cisco Catalyst SD-WAN Manager (20.15.4_LI_Images)Cisco Catalyst SD-WAN Manager (20.9.4.1_LI_Images)Cisco Catalyst SD-WAN Manager (20.9.8_LI_Images)Cisco Catalyst SD-WAN Manager (20.9.3.0.2)Cisco Catalyst SD-WAN Manager (19.2.31)Cisco Catalyst SD-WAN Manager (20.6.7)Cisco Catalyst SD-WAN Manager (18.4.0.1)Cisco Catalyst SD-WAN Manager (18.3.1)Cisco Catalyst SD-WAN Manager (20.12.3_LI_Images)Cisco Catalyst SD-WAN Manager (20.12.4.0.03)Cisco Catalyst SD-WAN Manager (20.6.3.0.38)Cisco Catalyst SD-WAN Manager (20.6.5.1.4)Cisco Catalyst SD-WAN Manager (20.3.3.1.2)Cisco Catalyst SD-WAN Manager (20.15.2_LI_Images)Cisco Catalyst SD-WAN Manager (20.14.1_LI_Images)Cisco Catalyst SD-WAN Manager (20.18.2_LI_Images)Cisco Catalyst SD-WAN Manager (20.9.4.0.4)Cisco Catalyst SD-WAN Manager (20.6.3.0.18)Cisco Catalyst SD-WAN Manager (20.6.5.3)Cisco Catalyst SD-WAN Manager (20.3.8)Cisco Catalyst SD-WAN Manager (20.6.3.0.29)Cisco Catalyst SD-WAN Manager (20.3.3.1.5)Cisco Catalyst SD-WAN Manager (20.6.2.2.4)Cisco Catalyst SD-WAN Manager (20.6.5.1.14)Cisco Catalyst SD-WAN Manager (19.2.32)Cisco Catalyst SD-WAN Manager (20.4.2.0.4)Cisco Catalyst SD-WAN Manager (20.6.5.1.5)Cisco Catalyst SD-WAN Manager (20.1.3)Cisco Catalyst SD-WAN Manager (20.12.1)Cisco Catalyst SD-WAN Manager (20.9.3.0.8)Cisco Catalyst SD-WAN Manager (20.7.1EFT2)Cisco Catalyst SD-WAN Manager (20.18.1_LI_Images)Cisco Catalyst SD-WAN Manager (20.1.1)Cisco Catalyst SD-WAN Manager (20.13.1)Cisco Catalyst SD-WAN Manager (20.9.2.2)Cisco Catalyst SD-WAN Manager (20.9.3.0.4)Cisco Catalyst SD-WAN Manager (20.4.2.0.1)Cisco Catalyst SD-WAN Manager (19.2.099)Cisco Catalyst SD-WAN Manager (20.6.3.0.11)Cisco Catalyst SD-WAN Manager (20.6.6.0.1)Cisco Catalyst SD-WAN Manager (20.3.2.1)Cisco Catalyst SD-WAN Manager (20.4.2.2.3)Cisco Catalyst SD-WAN Manager (20.6.3.0.2)Cisco Catalyst SD-WAN Manager (20.15.3_ LI _Images)Cisco Catalyst SD-WAN Manager (20.3.4.1.1)Cisco Catalyst SD-WAN Manager (20.3.3)Cisco Catalyst SD-WAN Manager (20.3.4.2.1)Cisco Catalyst SD-WAN Manager (20.3.7.1)Cisco Catalyst SD-WAN Manager (20.3.4.2.2)Cisco Catalyst SD-WAN Manager (18.3.4)Cisco Catalyst SD-WAN Manager (20.12.5.2_LI_Images)Cisco Catalyst SD-WAN Manager (18.3.0)Cisco Catalyst SD-WAN Manager (20.3.3.1.10)Cisco Catalyst SD-WAN Manager (20.9.5.2.1)Cisco Catalyst SD-WAN Manager (20.6.4.0.19)Cisco Catalyst SD-WAN Manager (20.1.1.1)Cisco Catalyst SD-WAN Manager (20.8.1)Cisco Catalyst SD-WAN Manager (20.9.3.0.26)Cisco Catalyst SD-WAN Manager (20.3.5.0.8)Cisco Catalyst SD-WAN Manager (20.4.2.2)Cisco Catalyst SD-WAN Manager (20.9.6)Cisco Catalyst SD-WAN Manager (20.6.3.0.46)Cisco Catalyst SD-WAN Manager (20.3.6)Cisco Catalyst SD-WAN Manager (20.3.5)Cisco Catalyst SD-WAN Manager (20.12.5.1_LI_Images)Cisco Catalyst SD-WAN Manager (20.3.813)Cisco Catalyst SD-WAN Manager (20.9.2.0.01)Cisco Catalyst SD-WAN Manager (18.4.0)Cisco Catalyst SD-WAN Manager (20.12.5.1)Cisco Catalyst SD-WAN Manager (20.6.5.1.7)Cisco Catalyst SD-WAN Manager (20.6.2.2.7)Cisco Catalyst SD-WAN Manager (20.9.3)Cisco Catalyst SD-WAN Manager (20.4.2.2.2)Cisco Catalyst SD-WAN Manager (20.4.2.1)Cisco Catalyst SD-WAN Manager (20.6.3.0.47)Cisco Catalyst SD-WAN Manager (20.9.3.0.21)Cisco Catalyst SD-WAN Manager (20.18.2)Cisco Catalyst SD-WAN Manager (17.2.10)Cisco Catalyst SD-WAN Manager (20.11.1)Cisco Catalyst SD-WAN Manager (20.9.5.1_LI_Images)Cisco Catalyst SD-WAN Manager (20.3.3.2)Cisco Catalyst SD-WAN Manager (20.4.1.1.5)Cisco Catalyst SD-WAN Manager (20.6.5.1.11)Cisco Catalyst SD-WAN Manager (20.3.5.1)Cisco Catalyst SD-WAN Manager (20.12.4.0.6)Cisco Catalyst SD-WAN Manager (20.3.4.0.6)Cisco Catalyst SD-WAN Manager (20.15.4.1_LI_Images)Cisco Catalyst SD-WAN Manager (20.15.3)Cisco Catalyst SD-WAN Manager (20.9.4.1.6)Cisco Catalyst SD-WAN Manager (20.6.2.2)Cisco Catalyst SD-WAN Manager (20.6.3.0.7)Cisco Catalyst SD-WAN Manager (18.3.8)Cisco Catalyst SD-WAN Manager (20.12.401)Cisco Catalyst SD-WAN Manager (20.3.7.2)Cisco Catalyst SD-WAN Manager (20.6.4.0.21)Cisco Catalyst SD-WAN Manager (20.12.4.1)Cisco Catalyst SD-WAN Manager (20.6.3)Cisco Catalyst SD-WAN Manager (20.9.2_LI_Images)Cisco Catalyst SD-WAN Manager (20.9.5_LI_Images)Cisco Catalyst SD-WAN Manager (20.4.2.0.2)Cisco Catalyst SD-WAN Manager (20.1.2_937)Cisco Catalyst SD-WAN Manager (20.9.3_LI_ Images)
- Aliases
-
GHSA-9qpv-49q8-9chx
ENISA description: A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite arbitrary files on the local file system. To exploit this vulnerability, the attacker must have valid read-only credentials with API access on the affected system. This vulnerability is due to improper file handling on the API interface of an affected system. An attacker could exploit this vulnerability by uploading a malicious file on the local file system. A successful exploit could allow the attacker to overwrite arbitrary files on the affected system and gain vmanage user privileges.
Affected products (1)
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Cisco | Cisco Catalyst SD-WAN Manager |
20.1.12 (affected),
19.2.1 (affected),
18.4.4 (affected),
18.4.5 (affected),
20.1.1.1 (affected),
20.1.1 (affected),
19.3.0 (affected),
19.2.2 (affected),
19.2.099 (affected),
18.3.6 (affected),
18.3.7 (affected),
19.2.0 (affected),
18.3.8 (affected),
19.0.0 (affected),
19.1.0 (affected),
18.4.302 (affected),
18.4.303 (affected),
19.2.097 (affected),
19.2.098 (affected),
17.2.10 (affected),
18.3.6.1 (affected),
19.0.1a (affected),
18.2.0 (affected),
18.4.3 (affected),
18.4.1 (affected),
17.2.8 (affected),
18.3.3.1 (affected),
18.4.0 (affected),
18.3.1 (affected),
17.2.6 (affected),
17.2.9 (affected),
18.3.4 (affected),
17.2.5 (affected),
18.3.1.1 (affected),
18.3.5 (affected),
18.4.0.1 (affected),
18.3.3 (affected),
17.2.7 (affected),
17.2.4 (affected),
18.3.0 (affected),
19.2.3 (affected),
18.4.501_ES (affected),
20.3.1 (affected),
20.1.2 (affected),
19.2.929 (affected),
19.2.31 (affected),
20.3.2 (affected),
19.2.32 (affected),
20.3.2_925 (affected),
20.3.2.1 (affected),
20.3.2.1_927 (affected),
18.4.6 (affected),
20.1.2_937 (affected),
20.4.1 (affected),
20.3.2_928 (affected),
20.3.2_929 (affected),
20.4.1.0.1 (affected),
20.3.2.1_930 (affected),
19.2.4 (affected),
20.5.0.1.1 (affected),
20.4.1.1 (affected),
20.3.3 (affected),
19.2.4.0.1 (affected),
20.3.2_937 (affected),
20.3.3.1 (affected),
20.5.1 (affected),
20.1.3 (affected),
20.3.3.0.4 (affected),
20.3.3.1.2 (affected),
20.3.3.1.1 (affected),
20.4.1.2 (affected),
20.3.3.0.2 (affected),
20.4.1.1.5 (affected),
20.4.1.0.01 (affected),
20.4.1.0.02 (affected),
20.3.3.1.7 (affected),
20.3.3.1.5 (affected),
20.5.1.0.1 (affected),
20.3.3.1.10 (affected),
20.3.3.0.8 (affected),
20.4.2 (affected),
20.4.2.0.1 (affected),
20.3.4 (affected),
20.3.3.0.14 (affected),
19.2.4.0.8 (affected),
19.2.4.0.9 (affected),
20.3.4.0.1 (affected),
20.3.2.0.5 (affected),
20.6.1 (affected),
20.5.1.0.2 (affected),
20.3.3.0.17 (affected),
20.6.1.1 (affected),
20.6.0.18.3 (affected),
20.3.2.0.6 (affected),
20.6.0.18.4 (affected),
20.4.2.0.2 (affected),
20.3.3.0.16 (affected),
20.3.4.0.5 (affected),
20.6.1.0.1 (affected),
20.3.4.0.6 (affected),
20.6.2 (affected),
20.7.1EFT2 (affected),
20.3.4.0.9 (affected),
20.3.4.0.11 (affected),
20.4.2.0.4 (affected),
20.3.3.0.18 (affected),
20.7.1 (affected),
20.6.2.1 (affected),
20.3.4.1 (affected),
20.5.1.1 (affected),
20.4.2.1 (affected),
20.4.2.1.1 (affected),
20.3.4.1.1 (affected),
20.3.813 (affected),
20.3.4.0.19 (affected),
20.4.2.2.1 (affected),
20.5.1.2 (affected),
20.3.4.2 (affected),
20.3.814 (affected),
20.4.2.2 (affected),
20.6.2.2 (affected),
20.3.4.2.1 (affected),
20.7.1.1 (affected),
20.3.4.1.2 (affected),
20.6.2.2.2 (affected),
20.3.4.0.20 (affected),
20.6.2.2.3 (affected),
20.4.2.2.2 (affected),
20.3.5 (affected),
20.6.2.0.4 (affected),
20.4.2.2.3 (affected),
20.3.4.0.24 (affected),
20.6.2.2.7 (affected),
20.6.3 (affected),
20.3.4.2.2 (affected),
20.4.2.2.4 (affected),
20.7.1.0.2 (affected),
20.8.1 (affected),
20.3.5.0.8 (affected),
20.3.5.0.9 (affected),
20.4.2.2.8 (affected),
20.3.5.0.7 (affected),
20.6.3.0.7 (affected),
20.6.3.0.5 (affected),
20.6.3.0.10 (affected),
20.6.3.0.2 (affected),
20.7.2 (affected),
20.9.1EFT2 (affected),
20.6.3.0.11 (affected),
20.6.3.1 (affected),
20.6.3.0.14 (affected),
20.6.4 (affected),
20.9.1 (affected),
20.6.3.0.19 (affected),
20.6.3.0.18 (affected),
20.3.6 (affected),
20.9.1.1 (affected),
20.6.3.0.23 (affected),
20.6.4.0.4 (affected),
20.6.3.0.25 (affected),
20.6.5 (affected),
20.6.3.0.27 (affected),
20.9.2 (affected),
20.9.2.1 (affected),
20.6.3.0.29 (affected),
20.6.3.0.31 (affected),
20.6.3.0.32 (affected),
20.10.1 (affected),
20.6.3.0.33 (affected),
20.9.2.0.01 (affected),
20.9.1_LI_Images (affected),
20.10.1_LI_Images (affected),
20.9.2_LI_Images (affected),
20.3.7 (affected),
20.9.3 (affected),
20.6.5.1 (affected),
20.11.1 (affected),
20.11.1_LI_Images (affected),
20.9.3_LI_ Images (affected),
20.6.3.1.1 (affected),
20.9.3.0.2 (affected),
20.6.5.1.2 (affected),
20.9.3.0.3 (affected),
20.4.2.3 (affected),
20.6.3.2 (affected),
20.6.4.1 (affected),
20.6.3.0.38 (affected),
20.6.3.0.39 (affected),
20.3.5.1 (affected),
20.3.4.3 (affected),
20.9.3.1 (affected),
20.3.3.2 (affected),
20.6.5.2 (affected),
20.3.7.1 (affected),
20.10.1.1 (affected),
20.6.5.2.1 (affected),
20.3.4.0.25 (affected),
20.6.2.2.4 (affected),
20.6.1.2 (affected),
20.11.1.1 (affected),
20.9.3.0.5 (affected),
20.3.4.0.26 (affected),
20.6.5.1.3 (affected),
20.6.3.0.40 (affected),
20.1.3.1 (affected),
20.9.2.2 (affected),
20.6.5.2.3 (affected),
20.6.5.1.4 (affected),
20.6.5.3 (affected),
20.6.3.0.41 (affected),
20.9.3.0.7 (affected),
20.6.5.1.5 (affected),
20.9.3.0.4 (affected),
20.6.4.0.19 (affected),
20.6.5.1.6 (affected),
20.9.3.0.8 (affected),
20.6.3.3 (affected),
20.3.7.2 (affected),
20.6.5.4 (affected),
20.6.5.1.7 (affected),
20.9.3.0.12 (affected),
20.6.4.2 (affected),
20.6.5.5 (affected),
20.9.3.2 (affected),
20.11.1.2 (affected),
20.6.3.4 (affected),
20.10.1.2 (affected),
20.6.5.1.9 (affected),
20.9.3.0.16 (affected),
20.6.3.0.45 (affected),
20.6.5.1.10 (affected),
20.9.3.0.17 (affected),
20.6.5.2.4 (affected),
20.6.4.0.21 (affected),
20.9.3.0.18 (affected),
20.6.3.0.46 (affected),
20.6.3.0.47 (affected),
20.9.2.3 (affected),
20.9.3.2_LI_Images (affected),
20.9.3.0.21 (affected),
20.9.3.0.20 (affected),
20.9.4_LI_Images (affected),
20.9.4 (affected),
20.6.5.1.11 (affected),
20.12.1 (affected),
20.12.1_LI_Images (affected),
20.6.5.1.13 (affected),
20.9.3.0.23 (affected),
20.6.5.2.8 (affected),
20.9.4.1 (affected),
20.9.4.1_LI_Images (affected),
20.9.3.0.25 (affected),
20.9.3.0.24 (affected),
20.6.5.1.14 (affected),
20.3.8 (affected),
20.6.6 (affected),
20.9.3.0.26 (affected),
20.6.3.0.51 (affected),
20.9.3.0.29 (affected),
20.12.2 (affected),
20.12.2_LI_Images (affected),
20.6.6.0.1 (affected),
20.13.1_LI_Images (affected),
20.9.4.0.4 (affected),
20.13.1 (affected),
20.9.4.1.1 (affected),
20.9.5 (affected),
20.9.5_LI_Images (affected),
20.12.3_LI_Images (affected),
20.12.3 (affected),
20.9.4.1.3 (affected),
20.6.7 (affected),
20.9.5.1 (affected),
20.9.5.1_LI_Images (affected),
20.9.4.1.6 (affected),
20.14.1 (affected),
20.14.1_LI_Images (affected),
20.9.5.2 (affected),
20.9.5.2.1 (affected),
20.9.5.2_LI_Images (affected),
20.12.3.1 (affected),
20.12.4 (affected),
20.15.1_LI_Images (affected),
20.15.1 (affected),
20.9.5.1.4 (affected),
20.9.5.2.7 (affected),
20.9.5.2.13 (affected),
20.9.6 (affected),
20.9.6_LI_Images (affected),
20.9.5.2.14 (affected),
20.6.8 (affected),
20.12.4.0.03 (affected),
20.16.1 (affected),
20.16.1_LI_Images (affected),
20.12.4_LI_Images (affected),
20.9.5.2.16 (affected),
20.12.4.0.4 (affected),
20.12.401 (affected),
20.9.5.3 (affected),
20.9.5.3_LI_Images (affected),
20.12.4.1_LI_Images (affected),
20.12.4.1 (affected),
20.9.5.2.21 (affected),
20.9.6.0.3 (affected),
20.12.4.0.6 (affected),
20.15.2_LI_Images (affected),
20.15.2 (affected),
20.12.4_Monthly_ES5 (affected),
20.12.5 (affected),
20.12.5_LI_Images (affected),
20.9.7_LI _Images (affected),
20.9.7 (affected),
20.15.3 (affected),
20.15.3_ LI _Images (affected),
20.12.501 (affected),
20.12.5.1_LI_Images (affected),
20.12.5.1 (affected),
20.12.5.2_LI_Images (affected),
20.12.5.2 (affected),
20.15.3.1 (affected),
20.15.4_LI_Images (affected),
20.15.4 (affected),
20.9.7.1_LI _Images (affected),
20.9.7.1 (affected),
20.18.1 (affected),
20.18.1_LI_Images (affected),
20.12.6_LI_Images (affected),
20.12.6 (affected),
20.12.5.1.01 (affected),
20.9.8 (affected),
20.9.8_LI_Images (affected),
20.18.2 (affected),
20.15.4.1_LI_Images (affected),
20.15.4.1 (affected),
20.18.2_LI_Images (affected)
|
— |
Affected products — CPE 2.3 (2) NVD
NVD's normalized CPE 2.3 matchers, used by vendor tools (vulnerability scanners, asset managers) for automated detection. Compare with the CNA's free-text "Affected products" section above.
cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.12.6:*:*:*:*:*:*:*
Vendor references (1)
References embedded in the original CVE record by the assigning CNA.
Web references (5)
DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.
- http://cwe.mitre.org/data/definitions/648.html rapid7:cwe.mitre.org
- https://attackerkb.com/topics/CVE-2026-20122 rapid7:attackerkb.com
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-8673 rapid7:euvd.enisa.europa.eu
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v rapid7:sec.cloudapps.cisco.com
- https://www.cve.org/CVERecord?id=CVE-2026-20122 rapid7:www.cve.org
NVD-tagged references (2)
Reference list NVD curates from the CNA record, vendor advisories, and third-party reports. The tag chips below are NVD's analyst-assigned categories.
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v psirt@cisco.com Vendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20122 134c704f-9b21-4f2e-91b3-4a467353bcc0 US Government Resource
Remediations (10)
-
web:documentation.n-able.com
For more information on how Patch Manager provides third-party patching, see Patching third-party software. Use the table's InstallerURLs location when configuring vendor and patch exclusions in your firewalls and other web-monitoring software.
2026-05-23 21:40 UTC -
web:federalnewsnetwork.com
CISA's latest emergency directive tells agencies to immediately patch critical vulnerabilities in Cisco networking devices.
2026-05-23 21:40 UTC -
web:nvd.nist.gov
An official website of the United States government Here's how you know
2026-05-23 21:40 UTC -
web:portal.msrc.microsoft.com
The Security Update Guide provides information on the latest Microsoft security updates, helping users understand and address potential vulnerabilities effectively.
2026-05-23 21:40 UTC -
web:sec.cloudapps.cisco.com
Multiple vulnerabilities in Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an attacker to access an affected system, elevate privileges to root, gain access to sensitive information, and overwrite arbitrary files. For more information about these vulnerabilities, see the Details section of this advisory. Cisco has released software updates that address these ...
2026-05-23 21:40 UTC -
web:www.bleepingcomputer.com
CISA has given U.S. government agencies four days to secure their systems against another Catalyst SD-WAN Manager vulnerability it flagged as actively exploited in attacks.
2026-05-23 21:40 UTC -
web:www.cisecurity.org
<p>Multiple vulnerabilities have been discovered in Microsoft products, the most severe of which could allow for remote code execution. Successful exploitation of the most severe of these vulnerabilities could result in an attacker gaining the same privileges as the logged-on user. Depending on the privileges associated with the user, an attacker could then install programs; view, change, or ...
2026-05-23 21:40 UTC -
web:www.oracle.com
This Critical Patch Update contains 481 new security patches across the product families listed below. Please note that an MOS note summarizing the content of this Critical Patch Update and other Oracle Software Security Assurance activities is located at April 2026 Critical Patch Update: Executive Summary and Analysis.
2026-05-23 21:40 UTC -
web:www.sentinelone.com
CVE-2026-20122 is a privilege escalation vulnerability in Cisco Catalyst SD-WAN Manager. Learn about its impact, affected versions, and mitigation methods.
2026-05-23 21:40 UTC -
web:zecurit.com
Get the complete breakdown of Microsoft's May 2026 Patch Tuesday. We analyze the latest security updates and all critical CVEs .
2026-05-23 21:40 UTC
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.
Raw JSON
The full cvelistV5 record. Download as CVE-2026-20122.json.
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-20122",
"options": [
{
"Exploitation": "active"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-03-05T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
},
{
"other": {
"content": {
"dateAdded": "2026-04-20",
"reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20122"
},
"type": "kev"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-04-21T03:55:33.255Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"government-resource"
],
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20122"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-04-20T00:00:00.000Z",
"value": "CVE-2026-20122 added to CISA KEV"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Cisco Catalyst SD-WAN Manager",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "20.1.12"
},
{
"status": "affected",
"version": "19.2.1"
},
{
"status": "affected",
"version": "18.4.4"
},
{
"status": "affected",
"version": "18.4.5"
},
{
"status": "affected",
"version": "20.1.1.1"
},
{
"status": "affected",
"version": "20.1.1"
},
{
"status": "affected",
"version": "19.3.0"
},
{
"status": "affected",
"version": "19.2.2"
},
{
"status": "affected",
"version": "19.2.099"
},
{
"status": "affected",
"version": "18.3.6"
},
{
"status": "affected",
"version": "18.3.7"
},
{
"status": "affected",
"version": "19.2.0"
},
{
"status": "affected",
"version": "18.3.8"
},
{
"status": "affected",
"version": "19.0.0"
},
{
"status": "affected",
"version": "19.1.0"
},
{
"status": "affected",
"version": "18.4.302"
},
{
"status": "affected",
"version": "18.4.303"
},
{
"status": "affected",
"version": "19.2.097"
},
{
"status": "affected",
"version": "19.2.098"
},
{
"status": "affected",
"version": "17.2.10"
},
{
"status": "affected",
"version": "18.3.6.1"
},
{
"status": "affected",
"version": "19.0.1a"
},
{
"status": "affected",
"version": "18.2.0"
},
{
"status": "affected",
"version": "18.4.3"
},
{
"status": "affected",
"version": "18.4.1"
},
{
"status": "affected",
"version": "17.2.8"
},
{
"status": "affected",
"version": "18.3.3.1"
},
{
"status": "affected",
"version": "18.4.0"
},
{
"status": "affected",
"version": "18.3.1"
},
{
"status": "affected",
"version": "17.2.6"
},
{
"status": "affected",
"version": "17.2.9"
},
{
"status": "affected",
"version": "18.3.4"
},
{
"status": "affected",
"version": "17.2.5"
},
{
"status": "affected",
"version": "18.3.1.1"
},
{
"status": "affected",
"version": "18.3.5"
},
{
"status": "affected",
"version": "18.4.0.1"
},
{
"status": "affected",
"version": "18.3.3"
},
{
"status": "affected",
"version": "17.2.7"
},
{
"status": "affected",
"version": "17.2.4"
},
{
"status": "affected",
"version": "18.3.0"
},
{
"status": "affected",
"version": "19.2.3"
},
{
"status": "affected",
"version": "18.4.501_ES"
},
{
"status": "affected",
"version": "20.3.1"
},
{
"status": "affected",
"version": "20.1.2"
},
{
"status": "affected",
"version": "19.2.929"
},
{
"status": "affected",
"version": "19.2.31"
},
{
"status": "affected",
"version": "20.3.2"
},
{
"status": "affected",
"version": "19.2.32"
},
{
"status": "affected",
"version": "20.3.2_925"
},
{
"status": "affected",
"version": "20.3.2.1"
},
{
"status": "affected",
"version": "20.3.2.1_927"
},
{
"status": "affected",
"version": "18.4.6"
},
{
"status": "affected",
"version": "20.1.2_937"
},
{
"status": "affected",
"version": "20.4.1"
},
{
"status": "affected",
"version": "20.3.2_928"
},
{
"status": "affected",
"version": "20.3.2_929"
},
{
"status": "affected",
"version": "20.4.1.0.1"
},
{
"status": "affected",
"version": "20.3.2.1_930"
},
{
"status": "affected",
"version": "19.2.4"
},
{
"status": "affected",
"version": "20.5.0.1.1"
},
{
"status": "affected",
"version": "20.4.1.1"
},
{
"status": "affected",
"version": "20.3.3"
},
{
"status": "affected",
"version": "19.2.4.0.1"
},
{
"status": "affected",
"version": "20.3.2_937"
},
{
"status": "affected",
"version": "20.3.3.1"
},
{
"status": "affected",
"version": "20.5.1"
},
{
"status": "affected",
"version": "20.1.3"
},
{
"status": "affected",
"version": "20.3.3.0.4"
},
{
"status": "affected",
"version": "20.3.3.1.2"
},
{
"status": "affected",
"version": "20.3.3.1.1"
},
{
"status": "affected",
"version": "20.4.1.2"
},
{
"status": "affected",
"version": "20.3.3.0.2"
},
{
"status": "affected",
"version": "20.4.1.1.5"
},
{
"status": "affected",
"version": "20.4.1.0.01"
},
{
"status": "affected",
"version": "20.4.1.0.02"
},
{
"status": "affected",
"version": "20.3.3.1.7"
},
{
"status": "affected",
"version": "20.3.3.1.5"
},
{
"status": "affected",
"version": "20.5.1.0.1"
},
{
"status": "affected",
"version": "20.3.3.1.10"
},
{
"status": "affected",
"version": "20.3.3.0.8"
},
{
"status": "affected",
"version": "20.4.2"
},
{
"status": "affected",
"version": "20.4.2.0.1"
},
{
"status": "affected",
"version": "20.3.4"
},
{
"status": "affected",
"version": "20.3.3.0.14"
},
{
"status": "affected",
"version": "19.2.4.0.8"
},
{
"status": "affected",
"version": "19.2.4.0.9"
},
{
"status": "affected",
"version": "20.3.4.0.1"
},
{
"status": "affected",
"version": "20.3.2.0.5"
},
{
"status": "affected",
"version": "20.6.1"
},
{
"status": "affected",
"version": "20.5.1.0.2"
},
{
"status": "affected",
"version": "20.3.3.0.17"
},
{
"status": "affected",
"version": "20.6.1.1"
},
{
"status": "affected",
"version": "20.6.0.18.3"
},
{
"status": "affected",
"version": "20.3.2.0.6"
},
{
"status": "affected",
"version": "20.6.0.18.4"
},
{
"status": "affected",
"version": "20.4.2.0.2"
},
{
"status": "affected",
"version": "20.3.3.0.16"
},
{
"status": "affected",
"version": "20.3.4.0.5"
},
{
"status": "affected",
"version": "20.6.1.0.1"
},
{
"status": "affected",
"version": "20.3.4.0.6"
},
{
"status": "affected",
"version": "20.6.2"
},
{
"status": "affected",
"version": "20.7.1EFT2"
},
{
"status": "affected",
"version": "20.3.4.0.9"
},
{
"status": "affected",
"version": "20.3.4.0.11"
},
{
"status": "affected",
"version": "20.4.2.0.4"
},
{
"status": "affected",
"version": "20.3.3.0.18"
},
{
"status": "affected",
"version": "20.7.1"
},
{
"status": "affected",
"version": "20.6.2.1"
},
{
"status": "affected",
"version": "20.3.4.1"
},
{
"status": "affected",
"version": "20.5.1.1"
},
{
"status": "affected",
"version": "20.4.2.1"
},
{
"status": "affected",
"version": "20.4.2.1.1"
},
{
"status": "affected",
"version": "20.3.4.1.1"
},
{
"status": "affected",
"version": "20.3.813"
},
{
"status": "affected",
"version": "20.3.4.0.19"
},
{
"status": "affected",
"version": "20.4.2.2.1"
},
{
"status": "affected",
"version": "20.5.1.2"
},
{
"status": "affected",
"version": "20.3.4.2"
},
{
"status": "affected",
"version": "20.3.814"
},
{
"status": "affected",
"version": "20.4.2.2"
},
{
"status": "affected",
"version": "20.6.2.2"
},
{
"status": "affected",
"version": "20.3.4.2.1"
},
{
"status": "affected",
"version": "20.7.1.1"
},
{
"status": "affected",
"version": "20.3.4.1.2"
},
{
"status": "affected",
"version": "20.6.2.2.2"
},
{
"status": "affected",
"version": "20.3.4.0.20"
},
{
"status": "affected",
"version": "20.6.2.2.3"
},
{
"status": "affected",
"version": "20.4.2.2.2"
},
{
"status": "affected",
"version": "20.3.5"
},
{
"status": "affected",
"version": "20.6.2.0.4"
},
{
"status": "affected",
"version": "20.4.2.2.3"
},
{
"status": "affected",
"version": "20.3.4.0.24"
},
{
"status": "affected",
"version": "20.6.2.2.7"
},
{
"status": "affected",
"version": "20.6.3"
},
{
"status": "affected",
"version": "20.3.4.2.2"
},
{
"status": "affected",
"version": "20.4.2.2.4"
},
{
"status": "affected",
"version": "20.7.1.0.2"
},
{
"status": "affected",
"version": "20.8.1"
},
{
"status": "affected",
"version": "20.3.5.0.8"
},
{
"status": "affected",
"version": "20.3.5.0.9"
},
{
"status": "affected",
"version": "20.4.2.2.8"
},
{
"status": "affected",
"version": "20.3.5.0.7"
},
{
"status": "affected",
"version": "20.6.3.0.7"
},
{
"status": "affected",
"version": "20.6.3.0.5"
},
{
"status": "affected",
"version": "20.6.3.0.10"
},
{
"status": "affected",
"version": "20.6.3.0.2"
},
{
"status": "affected",
"version": "20.7.2"
},
{
"status": "affected",
"version": "20.9.1EFT2"
},
{
"status": "affected",
"version": "20.6.3.0.11"
},
{
"status": "affected",
"version": "20.6.3.1"
},
{
"status": "affected",
"version": "20.6.3.0.14"
},
{
"status": "affected",
"version": "20.6.4"
},
{
"status": "affected",
"version": "20.9.1"
},
{
"status": "affected",
"version": "20.6.3.0.19"
},
{
"status": "affected",
"version": "20.6.3.0.18"
},
{
"status": "affected",
"version": "20.3.6"
},
{
"status": "affected",
"version": "20.9.1.1"
},
{
"status": "affected",
"version": "20.6.3.0.23"
},
{
"status": "affected",
"version": "20.6.4.0.4"
},
{
"status": "affected",
"version": "20.6.3.0.25"
},
{
"status": "affected",
"version": "20.6.5"
},
{
"status": "affected",
"version": "20.6.3.0.27"
},
{
"status": "affected",
"version": "20.9.2"
},
{
"status": "affected",
"version": "20.9.2.1"
},
{
"status": "affected",
"version": "20.6.3.0.29"
},
{
"status": "affected",
"version": "20.6.3.0.31"
},
{
"status": "affected",
"version": "20.6.3.0.32"
},
{
"status": "affected",
"version": "20.10.1"
},
{
"status": "affected",
"version": "20.6.3.0.33"
},
{
"status": "affected",
"version": "20.9.2.0.01"
},
{
"status": "affected",
"version": "20.9.1_LI_Images"
},
{
"status": "affected",
"version": "20.10.1_LI_Images"
},
{
"status": "affected",
"version": "20.9.2_LI_Images"
},
{
"status": "affected",
"version": "20.3.7"
},
{
"status": "affected",
"version": "20.9.3"
},
{
"status": "affected",
"version": "20.6.5.1"
},
{
"status": "affected",
"version": "20.11.1"
},
{
"status": "affected",
"version": "20.11.1_LI_Images"
},
{
"status": "affected",
"version": "20.9.3_LI_ Images"
},
{
"status": "affected",
"version": "20.6.3.1.1"
},
{
"status": "affected",
"version": "20.9.3.0.2"
},
{
"status": "affected",
"version": "20.6.5.1.2"
},
{
"status": "affected",
"version": "20.9.3.0.3"
},
{
"status": "affected",
"version": "20.4.2.3"
},
{
"status": "affected",
"version": "20.6.3.2"
},
{
"status": "affected",
"version": "20.6.4.1"
},
{
"status": "affected",
"version": "20.6.3.0.38"
},
{
"status": "affected",
"version": "20.6.3.0.39"
},
{
"status": "affected",
"version": "20.3.5.1"
},
{
"status": "affected",
"version": "20.3.4.3"
},
{
"status": "affected",
"version": "20.9.3.1"
},
{
"status": "affected",
"version": "20.3.3.2"
},
{
"status": "affected",
"version": "20.6.5.2"
},
{
"status": "affected",
"version": "20.3.7.1"
},
{
"status": "affected",
"version": "20.10.1.1"
},
{
"status": "affected",
"version": "20.6.5.2.1"
},
{
"status": "affected",
"version": "20.3.4.0.25"
},
{
"status": "affected",
"version": "20.6.2.2.4"
},
{
"status": "affected",
"version": "20.6.1.2"
},
{
"status": "affected",
"version": "20.11.1.1"
},
{
"status": "affected",
"version": "20.9.3.0.5"
},
{
"status": "affected",
"version": "20.3.4.0.26"
},
{
"status": "affected",
"version": "20.6.5.1.3"
},
{
"status": "affected",
"version": "20.6.3.0.40"
},
{
"status": "affected",
"version": "20.1.3.1"
},
{
"status": "affected",
"version": "20.9.2.2"
},
{
"status": "affected",
"version": "20.6.5.2.3"
},
{
"status": "affected",
"version": "20.6.5.1.4"
},
{
"status": "affected",
"version": "20.6.5.3"
},
{
"status": "affected",
"version": "20.6.3.0.41"
},
{
"status": "affected",
"version": "20.9.3.0.7"
},
{
"status": "affected",
"version": "20.6.5.1.5"
},
{
"status": "affected",
"version": "20.9.3.0.4"
},
{
"status": "affected",
"version": "20.6.4.0.19"
},
{
"status": "affected",
"version": "20.6.5.1.6"
},
{
"status": "affected",
"version": "20.9.3.0.8"
},
{
"status": "affected",
"version": "20.6.3.3"
},
{
"status": "affected",
"version": "20.3.7.2"
},
{
"status": "affected",
"version": "20.6.5.4"
},
{
"status": "affected",
"version": "20.6.5.1.7"
},
{
"status": "affected",
"version": "20.9.3.0.12"
},
{
"status": "affected",
"version": "20.6.4.2"
},
{
"status": "affected",
"version": "20.6.5.5"
},
{
"status": "affected",
"version": "20.9.3.2"
},
{
"status": "affected",
"version": "20.11.1.2"
},
{
"status": "affected",
"version": "20.6.3.4"
},
{
"status": "affected",
"version": "20.10.1.2"
},
{
"status": "affected",
"version": "20.6.5.1.9"
},
{
"status": "affected",
"version": "20.9.3.0.16"
},
{
"status": "affected",
"version": "20.6.3.0.45"
},
{
"status": "affected",
"version": "20.6.5.1.10"
},
{
"status": "affected",
"version": "20.9.3.0.17"
},
{
"status": "affected",
"version": "20.6.5.2.4"
},
{
"status": "affected",
"version": "20.6.4.0.21"
},
{
"status": "affected",
"version": "20.9.3.0.18"
},
{
"status": "affected",
"version": "20.6.3.0.46"
},
{
"status": "affected",
"version": "20.6.3.0.47"
},
{
"status": "affected",
"version": "20.9.2.3"
},
{
"status": "affected",
"version": "20.9.3.2_LI_Images"
},
{
"status": "affected",
"version": "20.9.3.0.21"
},
{
"status": "affected",
"version": "20.9.3.0.20"
},
{
"status": "affected",
"version": "20.9.4_LI_Images"
},
{
"status": "affected",
"version": "20.9.4"
},
{
"status": "affected",
"version": "20.6.5.1.11"
},
{
"status": "affected",
"version": "20.12.1"
},
{
"status": "affected",
"version": "20.12.1_LI_Images"
},
{
"status": "affected",
"version": "20.6.5.1.13"
},
{
"status": "affected",
"version": "20.9.3.0.23"
},
{
"status": "affected",
"version": "20.6.5.2.8"
},
{
"status": "affected",
"version": "20.9.4.1"
},
{
"status": "affected",
"version": "20.9.4.1_LI_Images"
},
{
"status": "affected",
"version": "20.9.3.0.25"
},
{
"status": "affected",
"version": "20.9.3.0.24"
},
{
"status": "affected",
"version": "20.6.5.1.14"
},
{
"status": "affected",
"version": "20.3.8"
},
{
"status": "affected",
"version": "20.6.6"
},
{
"status": "affected",
"version": "20.9.3.0.26"
},
{
"status": "affected",
"version": "20.6.3.0.51"
},
{
"status": "affected",
"version": "20.9.3.0.29"
},
{
"status": "affected",
"version": "20.12.2"
},
{
"status": "affected",
"version": "20.12.2_LI_Images"
},
{
"status": "affected",
"version": "20.6.6.0.1"
},
{
"status": "affected",
"version": "20.13.1_LI_Images"
},
{
"status": "affected",
"version": "20.9.4.0.4"
},
{
"status": "affected",
"version": "20.13.1"
},
{
"status": "affected",
"version": "20.9.4.1.1"
},
{
"status": "affected",
"version": "20.9.5"
},
{
"status": "affected",
"version": "20.9.5_LI_Images"
},
{
"status": "affected",
"version": "20.12.3_LI_Images"
},
{
"status": "affected",
"version": "20.12.3"
},
{
"status": "affected",
"version": "20.9.4.1.3"
},
{
"status": "affected",
"version": "20.6.7"
},
{
"status": "affected",
"version": "20.9.5.1"
},
{
"status": "affected",
"version": "20.9.5.1_LI_Images"
},
{
"status": "affected",
"version": "20.9.4.1.6"
},
{
"status": "affected",
"version": "20.14.1"
},
{
"status": "affected",
"version": "20.14.1_LI_Images"
},
{
"status": "affected",
"version": "20.9.5.2"
},
{
"status": "affected",
"version": "20.9.5.2.1"
},
{
"status": "affected",
"version": "20.9.5.2_LI_Images"
},
{
"status": "affected",
"version": "20.12.3.1"
},
{
"status": "affected",
"version": "20.12.4"
},
{
"status": "affected",
"version": "20.15.1_LI_Images"
},
{
"status": "affected",
"version": "20.15.1"
},
{
"status": "affected",
"version": "20.9.5.1.4"
},
{
"status": "affected",
"version": "20.9.5.2.7"
},
{
"status": "affected",
"version": "20.9.5.2.13"
},
{
"status": "affected",
"version": "20.9.6"
},
{
"status": "affected",
"version": "20.9.6_LI_Images"
},
{
"status": "affected",
"version": "20.9.5.2.14"
},
{
"status": "affected",
"version": "20.6.8"
},
{
"status": "affected",
"version": "20.12.4.0.03"
},
{
"status": "affected",
"version": "20.16.1"
},
{
"status": "affected",
"version": "20.16.1_LI_Images"
},
{
"status": "affected",
"version": "20.12.4_LI_Images"
},
{
"status": "affected",
"version": "20.9.5.2.16"
},
{
"status": "affected",
"version": "20.12.4.0.4"
},
{
"status": "affected",
"version": "20.12.401"
},
{
"status": "affected",
"version": "20.9.5.3"
},
{
"status": "affected",
"version": "20.9.5.3_LI_Images"
},
{
"status": "affected",
"version": "20.12.4.1_LI_Images"
},
{
"status": "affected",
"version": "20.12.4.1"
},
{
"status": "affected",
"version": "20.9.5.2.21"
},
{
"status": "affected",
"version": "20.9.6.0.3"
},
{
"status": "affected",
"version": "20.12.4.0.6"
},
{
"status": "affected",
"version": "20.15.2_LI_Images"
},
{
"status": "affected",
"version": "20.15.2"
},
{
"status": "affected",
"version": "20.12.4_Monthly_ES5"
},
{
"status": "affected",
"version": "20.12.5"
},
{
"status": "affected",
"version": "20.12.5_LI_Images"
},
{
"status": "affected",
"version": "20.9.7_LI _Images"
},
{
"status": "affected",
"version": "20.9.7"
},
{
"status": "affected",
"version": "20.15.3"
},
{
"status": "affected",
"version": "20.15.3_ LI _Images"
},
{
"status": "affected",
"version": "20.12.501"
},
{
"status": "affected",
"version": "20.12.5.1_LI_Images"
},
{
"status": "affected",
"version": "20.12.5.1"
},
{
"status": "affected",
"version": "20.12.5.2_LI_Images"
},
{
"status": "affected",
"version": "20.12.5.2"
},
{
"status": "affected",
"version": "20.15.3.1"
},
{
"status": "affected",
"version": "20.15.4_LI_Images"
},
{
"status": "affected",
"version": "20.15.4"
},
{
"status": "affected",
"version": "20.9.7.1_LI _Images"
},
{
"status": "affected",
"version": "20.9.7.1"
},
{
"status": "affected",
"version": "20.18.1"
},
{
"status": "affected",
"version": "20.18.1_LI_Images"
},
{
"status": "affected",
"version": "20.12.6_LI_Images"
},
{
"status": "affected",
"version": "20.12.6"
},
{
"status": "affected",
"version": "20.12.5.1.01"
},
{
"status": "affected",
"version": "20.9.8"
},
{
"status": "affected",
"version": "20.9.8_LI_Images"
},
{
"status": "affected",
"version": "20.18.2"
},
{
"status": "affected",
"version": "20.15.4.1_LI_Images"
},
{
"status": "affected",
"version": "20.15.4.1"
},
{
"status": "affected",
"version": "20.18.2_LI_Images"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite arbitrary files on the local file system. To exploit this vulnerability, the attacker must have valid read-only credentials with API access on the affected system.\r\n\r\nThis vulnerability is due to improper file handling on the API interface of an affected system. An attacker could exploit this vulnerability by uploading a malicious file on the local file system. A successful exploit could allow the attacker to overwrite arbitrary files on the affected system and gain vmanage user privileges."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in CVE-2026-20133, CVE-2026-20126, and CVE-2026-20129.\r\n\r\nIn March 2026, the Cisco PSIRT became aware of active exploitation of the vulnerabilities that are described in CVE-2026-20128 and CVE-2026-20122 only. The vulnerabilities that are described in the other CVEs in this advisory are not known to have been compromised. Cisco strongly recommends that customers upgrade to a fixed software release to remediate these vulnerabilities."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-648",
"description": "Incorrect Use of Privileged APIs",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-03-20T21:47:05.503Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-sdwan-authbp-qwCX8D4v",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v"
}
],
"source": {
"advisory": "cisco-sa-sdwan-authbp-qwCX8D4v",
"defects": [
"CSCws33584"
],
"discovery": "INTERNAL"
},
"title": "Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability"
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2026-20122",
"datePublished": "2026-02-25T16:14:21.256Z",
"dateReserved": "2025-10-08T11:59:15.377Z",
"dateUpdated": "2026-04-21T03:55:33.255Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}