Cisco Catalyst SD-WAN Manger: Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability
› Cisco Catalyst SD-WAN Manger
Get an email when a new major security incident drops. No spam, unsubscribe any time.
- started
- Apr 20, 2026
- closed
- Apr 20, 2026
- CVEs
- 1
- sources
- 3
## summary
Cisco Catalyst SD-WAN Manager contains an incorrect use of privileged APIs vulnerability due to improper file handling on the API interface of an affected system. An attacker could exploit this vulnerability by uploading a malicious file on the local file system. A successful exploit could allow the attacker to overwrite arbitrary files on the affected system and gain vmanage user privileges. Added to CISA KEV on 2026-04-20.
severity: Actively exploited (CISA KEV)
## cve ids[1]
## affected
- See vendor advisory / CISA notes (versions not always listed in KEV feed)
## fixed in
- See vendor advisory linked in sources
## timeline[1]
CISA added CVE-2026-20122 to the KEV catalog (due 2026-04-23).
## advisories[3]
## notes & caveats
Derived from CISA KEV JSON feed catalogVersion 2026.10.21. Exact affected/fixed version strings are not always in the KEV record — verify against the vendor advisory URL. startedAt uses dateAdded (exploitation may have begun earlier).
