Cisco Catalyst SD-WAN vulnerabilities

11 advisories, 11 actively exploited. Last update: October 28, 2026.

Running Catalyst SD-WAN devices? Get an email when a new vulnerability comes out. Free, unsubscribe in one click.
Turn on Catalyst SD-WAN alerts

CVE-2026-20127October 28, 2026Critical 10Exploited
Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
CVE-2026-76504October 2, 2026Critical 9.8Exploited
Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability
CVE-2026-76504September 30, 2026Critical 9.8Exploited
Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
CVE-2026-20262June 15, 2026Medium 6.5Exploited
Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability
CVE-2026-20245June 9, 2026High 7.8Exploited
Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability
CVE-2026-20182May 14, 2026Critical 10Exploited
Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
CVE-2026-20128April 20, 2026High 7.5Exploited
Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability
CVE-2026-20133April 20, 2026Medium 6.5Exploited
Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
CVE-2026-20122April 20, 2026Medium 5.4Exploited
Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability
CVE-2026-20127February 25, 2026Critical 10Exploited
Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability
CVE-2022-20775February 25, 2026High 7.8Exploited
Cisco SD-WAN Path Traversal Vulnerability