Catalyst SD-WAN 19.0 vulnerabilities
10 advisories affect Cisco Catalyst SD-WAN 19.0, 10 already exploited by attackers. Latest: October 28, 2026.
Running Catalyst SD-WAN 19.0 devices? Get an email when a new vulnerability comes out. Free, unsubscribe in one click.
Turn on Catalyst SD-WAN 19.0 alerts
Turn on Catalyst SD-WAN 19.0 alerts
| Vulnerability | Severity | Affected versions |
|---|---|---|
| Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability CVE-2026-20127 · October 28, 2026 | Critical 10 Exploited | 19.0.0; 19.0.1a |
| Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability CVE-2026-76504 · October 2, 2026 | Critical 9.8 Exploited | 19.0.0; 19.0.1a |
| Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability CVE-2026-76504 · September 30, 2026 | Critical 9.8 Exploited | 19.0.0; 19.0.1a |
| Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability CVE-2026-20262 · June 15, 2026 | Medium 6.5 Exploited | 19.0.0; 19.0.1a |
| Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability CVE-2026-20245 · June 9, 2026 | High 7.8 Exploited | 19.0.0; 19.0.1a |
| Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability CVE-2026-20182 · May 14, 2026 | Critical 10 Exploited | 19.0.0; 19.0.1a |
| Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability CVE-2026-20128 · April 20, 2026 | High 7.5 Exploited | 19.0.0; 19.0.1a |
| Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability CVE-2026-20122 · April 20, 2026 | Medium 5.4 Exploited | 19.0.0; 19.0.1a |
| Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability CVE-2026-20127 · February 25, 2026 | Critical 10 Exploited | 19.0.0; 19.0.1a |
| Cisco SD-WAN Path Traversal Vulnerability CVE-2022-20775 · February 25, 2026 | High 7.8 Exploited | 19.0.0; 19.0.0; 19.0.1a |
Affected versions are compiled automatically from vendor advisories and NVD and may contain errors. Where no fixed version is shown, you will find it in the official advisory linked from every page: check it there before updating.
Other Catalyst SD-WAN versions: 26.2 · 26.1 · 26.0 · 20.18 · 20.16 · 20.15 · 20.14 · 20.13 · 20.12 · 20.11 · 20.10 · 20.9 · 20.8 · 20.7 · 20.6 · 20.5 · 20.4 · 20.3 · 20.1 · 19.3 · 19.2 · 19.1 · 18.4 · 18.3 · 18.2 · 17.2