Catalyst SD-WAN 20.1 vulnerabilities
11 advisories affect Cisco Catalyst SD-WAN 20.1, 11 already exploited by attackers. Latest: October 28, 2026.
Running Catalyst SD-WAN 20.1 devices? Get an email when a new vulnerability comes out. Free, unsubscribe in one click.
Turn on Catalyst SD-WAN 20.1 alerts
Turn on Catalyst SD-WAN 20.1 alerts
| Vulnerability | Severity | Affected versions |
|---|---|---|
| Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability CVE-2026-20127 · October 28, 2026 | Critical 10 Exploited | 7 versions, from 20.1.1 to 20.1.12 |
| Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability CVE-2026-76504 · October 2, 2026 | Critical 9.8 Exploited | 7 versions, from 20.1.1 to 20.1.12 |
| Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability CVE-2026-76504 · September 30, 2026 | Critical 9.8 Exploited | 7 versions, from 20.1.1 to 20.1.12 |
| Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability CVE-2026-20262 · June 15, 2026 | Medium 6.5 Exploited | 7 versions, from 20.1.1 to 20.1.12 |
| Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability CVE-2026-20245 · June 9, 2026 | High 7.8 Exploited | 5 versions, from 20.1.1 to 20.1.12; 7 versions, from 20.1.1 to 20.1.12 |
| Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability CVE-2026-20182 · May 14, 2026 | Critical 10 Exploited | 5 versions, from 20.1.1 to 20.1.12 |
| Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability CVE-2026-20128 · April 20, 2026 | High 7.5 Exploited | 6 versions, from 20.1.1 to 20.1.12 |
| Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability CVE-2026-20133 · April 20, 2026 | Medium 6.5 Exploited | 5 versions, from 20.1.1 to 20.1.12 |
| Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability CVE-2026-20122 · April 20, 2026 | Medium 5.4 Exploited | 7 versions, from 20.1.1 to 20.1.12 |
| Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability CVE-2026-20127 · February 25, 2026 | Critical 10 Exploited | 7 versions, from 20.1.1 to 20.1.12 |
| Cisco SD-WAN Path Traversal Vulnerability CVE-2022-20775 · February 25, 2026 | High 7.8 Exploited | 7 versions, from 20.1.1 to 20.1.12; 6 versions, from 20.1.1 to 20.1.12 |
Affected versions are compiled automatically from vendor advisories and NVD and may contain errors. Where no fixed version is shown, you will find it in the official advisory linked from every page: check it there before updating.
Other Catalyst SD-WAN versions: 26.2 · 26.1 · 26.0 · 20.18 · 20.16 · 20.15 · 20.14 · 20.13 · 20.12 · 20.11 · 20.10 · 20.9 · 20.8 · 20.7 · 20.6 · 20.5 · 20.4 · 20.3 · 19.3 · 19.2 · 19.1 · 19.0 · 18.4 · 18.3 · 18.2 · 17.2