VulnSocial

CVE-2026-20210Disclosure(cisco / catalyst_sd-wan_manager)

LOWCVSS 5.4 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker with read-only permissions to modify configurations and perform unauthorized actions on an affected system. This vulnerability exists because of a failure to redact sensitive information within device configurations and templates. An attacker could exploit this vulnerability by elevating their read-only permissions to those of a high-privileged user. A successful exploit could allow the attacker to access or modify configuration settings within Cisco Catalyst SD-WAN Manager as a high-privileged user.

cisco CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-779

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • catalyst_sd-wan_manager

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-05-14); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
cisco
Products
catalyst_sd-wan_manager

1 version affected across 1 product

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-05-14: 1Mentions · 2026-05-17: 1Technical Details · 2026-05-14: 105-1405-17
Signal classification2 categories
Disclosure
150.0%
General
150.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-05-141
Disclosure1
2026-05-171
General1
Full discourse2 posts
  • にゃん☆たく/takumi.a@taku888infinity
    Disclosure

    CVE-2026-20182 Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SW 『（直訳）Cisco Catalyst SD-WAN Controller（旧称：SD-WAN vSmart）およびCisco Catalyst SD-WAN Manager（旧称：SD-WAN vManage）のピアリング認証における脆弱性により、認証されていないリモート攻撃者が認証を回避し、影響を受けるシステム上で管理者権限を取得できる可能性があります』 CVE-2026-20209/CVE-2026-20210/CVE-2026-20224 Cisco Catalyst SD-WAN Manager Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-mltvnps2-JxpWm7R 『（直訳）Cisco Catalyst SD-WAN Manager（旧称：SD-WAN vManage）には複数の脆弱性が存在し、リモートの攻撃者が機密情報にアクセスしたり、権限を昇格させたり、アプリケーションへの不正アクセスを実行したりする可能性があります。』

    Post summary

    The post discloses Cisco Catalyst SD‑WAN Controller and Manager authentication bypass vulnerabilities, explaining how unauthenticated remote attackers can elevate to admin privileges. No exploitation evidence or remediation details are provided in the text.

    01010825
    11.6K followersView on X
  • Israel@f1tym1
    General

    CVE-2026-20210 | Cisco Catalyst SD-WAN Manager up to 26.0.1 Web UI logging of excessive data (cisco-sa-sdwan-mltvnps2-JxpWm7R / WID-SEC-2026-1540) https://ift.tt/O0R6ICZ A vulnerability labeled as critical has been found in Cisco Catalyst SD-WAN Manager. This affects an unknow…

    Post summary

    The text announces a critical CVE‑2026‑20210 in Cisco Catalyst SD‑WAN Manager involving excessive data logging via the Web UI, but provides no exploit, patch, or detailed technical information.

    0000054
    974 followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
Appciscocatalyst_sd-wan_manager---
Appciscocatalyst_sd-wan_manager20.12.7--

Explore more

Back to dashboardcisco CVEscatalyst_sd-wan_manager vulnerabilities