Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by persuading a user of the web-based management interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2026-20108 A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to conduct a cross-site scripting… https://www.cve.org/CVERecord?id=CVE-2026-20108
Post summary
The text announces CVE‑2026‑20108 as a cross‑site scripting flaw in Cisco Catalyst SD‑WAN Manager’s web interface, with no PoC, exploit code, active exploitation, or patch details provided.
⚡ CVE-2026-20108: Cisco ... Authenticated XSS in Cisco's SD-WAN nerve center - low-hanging fruit for lateral movement through network admin sessions. #CiscoVuln #SDWAN #XSS. https://zerodaysignal.com/vulnerability/CVE-2026-20108 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
The tweet announces a new authenticated XSS vulnerability in Cisco’s SD‑WAN nerve center, describing its potential for lateral movement but providing no evidence of active exploitation, patches, or PoC details.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | cisco | catalyst_sd-wan_manager | - | - | - |
| App | cisco | catalyst_sd-wan_manager | 20.12.6 | - | - |