CVE-2026-20209: falha de média gravidade em Cisco Catalyst SD-WAN Manager
Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.4epss 0.2%
A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker with read-only permissions to elevate their privileges from low to high and perform actions as a high-privileged user.
This vulnerability exists because sensitive session information is recorded in audit logs. An attacker could exploit this vulnerability by elevating their read-only permissions in Cisco Catalyst SD-WAN Manager to those of a high-privileged user. A successful exploit could allow the attacker to perform actions as a high-privileged user.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Produtos afetados
Cisco · Cisco Catalyst SD-WAN ManagerCVEs relacionadas — Cisco Catalyst SD-WAN Manager
No mesmo produto, das mais perigosas para as menos.
CVE-2026-20182CRITICALCisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityEPSS 91.8%KEVCVE-2026-20127CRITICALCisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityEPSS 87.6%KEVCVE-2026-76504CRITICALCisco Catalyst SD-WAN Manager System Account Authorization Bypass VulnerabilityEPSS 38.9%KEVCVE-2026-20133MEDIUMCVE-2026-20133EPSS 35.3%KEVCVE-2026-20262MEDIUMCisco Catalyst SD-WAN Manager Arbitrary File Write VulnerabilityEPSS 29.1%KEVCVE-2026-20122MEDIUMCisco Catalyst SD-WAN Manager Arbitrary File Overwrite VulnerabilityEPSS 25.8%KEV