Catalyst SD-WAN 26.1 vulnerabilities

5 advisories affect Cisco Catalyst SD-WAN 26.1, 5 already exploited by attackers. Latest: October 2, 2026.

Running Catalyst SD-WAN 26.1 devices? Get an email when a new vulnerability comes out. Free, unsubscribe in one click.
Turn on Catalyst SD-WAN 26.1 alerts

Vulnerability	Severity	Affected versions
Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability CVE-2026-76504 · October 2, 2026	Critical 9.8 Exploited	11 versions, from 26.1.1 to 26.1.2.1.01
Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability CVE-2026-76504 · September 30, 2026	Critical 9.8 Exploited	11 versions, from 26.1.1 to 26.1.2.1.01
Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability CVE-2026-20262 · June 15, 2026	Medium 6.5 Exploited	4 versions, from 26.1.1 to 26.1.1.1
Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability CVE-2026-20245 · June 9, 2026	High 7.8 Exploited	26.1.1; 26.1.1.1; 26.1.1.2
Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability CVE-2026-20128 · April 20, 2026	High 7.5 Exploited	26.1.1

Affected versions are compiled automatically from vendor advisories and NVD and may contain errors. Where no fixed version is shown, you will find it in the official advisory linked from every page: check it there before updating.

Other Catalyst SD-WAN versions: 26.2 · 26.0 · 20.18 · 20.16 · 20.15 · 20.14 · 20.13 · 20.12 · 20.11 · 20.10 · 20.9 · 20.8 · 20.7 · 20.6 · 20.5 · 20.4 · 20.3 · 20.1 · 19.3 · 19.2 · 19.1 · 19.0 · 18.4 · 18.3 · 18.2 · 17.2