Catalyst SD-WAN 19.3 vulnerabilities

11 advisories affect Cisco Catalyst SD-WAN 19.3, 11 already exploited by attackers. Latest: October 28, 2026.

Running Catalyst SD-WAN 19.3 devices? Get an email when a new vulnerability comes out. Free, unsubscribe in one click.
Turn on Catalyst SD-WAN 19.3 alerts

Vulnerability	Severity	Affected versions
Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability CVE-2026-20127 · October 28, 2026	Critical 10 Exploited	19.3.0
Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability CVE-2026-76504 · October 2, 2026	Critical 9.8 Exploited	19.3.0
Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability CVE-2026-76504 · September 30, 2026	Critical 9.8 Exploited	19.3.0
Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability CVE-2026-20262 · June 15, 2026	Medium 6.5 Exploited	19.3.0
Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability CVE-2026-20245 · June 9, 2026	High 7.8 Exploited	19.3.0
Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability CVE-2026-20182 · May 14, 2026	Critical 10 Exploited	19.3.0
Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability CVE-2026-20128 · April 20, 2026	High 7.5 Exploited	19.3.0
Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability CVE-2026-20133 · April 20, 2026	Medium 6.5 Exploited	19.3.0
Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability CVE-2026-20122 · April 20, 2026	Medium 5.4 Exploited	19.3.0
Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability CVE-2026-20127 · February 25, 2026	Critical 10 Exploited	19.3.0
Cisco SD-WAN Path Traversal Vulnerability CVE-2022-20775 · February 25, 2026	High 7.8 Exploited	19.3.0

Affected versions are compiled automatically from vendor advisories and NVD and may contain errors. Where no fixed version is shown, you will find it in the official advisory linked from every page: check it there before updating.

Other Catalyst SD-WAN versions: 26.2 · 26.1 · 26.0 · 20.18 · 20.16 · 20.15 · 20.14 · 20.13 · 20.12 · 20.11 · 20.10 · 20.9 · 20.8 · 20.7 · 20.6 · 20.5 · 20.4 · 20.3 · 20.1 · 19.2 · 19.1 · 19.0 · 18.4 · 18.3 · 18.2 · 17.2