# Cisco Catalyst SD-WAN Manager vulnerabilities Source: https://junglewise.ai/threats/technologies/catalyst-sd-wan-manager Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 11 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/catalyst-sd-wan-manager.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 13 vulnerabilities in Cisco Catalyst SD-WAN Manager: 0 in the last 7 days and 1 in the last 90 days, 8 of them critical and 8 exploited in the wild. The most recent, CVE-2026-76504, was published on 30 September 2026. Nothing in the last four weeks, down from 1 vulnerability in the four before. 0 critical against 1, 0 exploited in the wild against 1. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 1 - All time: 13 (8 critical, 8 exploited in the wild) ## About Cisco Catalyst SD-WAN Manager Cisco SD-WAN network management and orchestration platform. ## Latest Cisco Catalyst SD-WAN Manager vulnerabilities - [CVE-2026-76504: Cisco Catalyst SD-WAN Manager API authentication bypass](https://junglewise.ai/threats/cve-2026-76504-a-vulnerability-in-the-api-session-based-authentication) (critical, exploited in the wild, CVSS 9.8, published 30 Sep 2026) - [CVE-2026-20294: Cisco Catalyst SD-WAN Manager information disclosure in web interface](https://junglewise.ai/threats/cve-2026-20294-cisco-catalyst-sd-wan-manager-information-disclosure-in-web) (medium, CVSS 6.5, published 5 Aug 2026) - [CVE-2026-20262: Cisco Catalyst SD-WAN Manager arbitrary file write in web UI](https://junglewise.ai/threats/cve-2026-20262-cisco-catalyst-sd-wan-manager-arbitrary-file-write-in-web-ui) (critical, exploited in the wild, CVSS 6.5, published 15 Jun 2026) - [CVE-2026-20245: Cisco Catalyst SD-WAN Manager privilege escalation in CLI](https://junglewise.ai/threats/cve-2026-20245-cisco-catalyst-sd-wan-manager-privilege-escalation-in-cli) (critical, exploited in the wild, CVSS 7.8, published 4 Jun 2026) - [CVE-2026-20224: Cisco Catalyst SD-WAN Manager XXE in web UI](https://junglewise.ai/threats/cve-2026-20224-cisco-catalyst-sd-wan-manager-xxe-in-web-ui) (high, CVSS 8.6, published 14 May 2026) - [CVE-2026-20210: Cisco Catalyst SD-WAN Manager privilege escalation in web UI](https://junglewise.ai/threats/cve-2026-20210-cisco-catalyst-sd-wan-manager-privilege-escalation-in-web-ui) (medium, CVSS 5.4, published 14 May 2026) - [CVE-2026-20209: Cisco Catalyst SD-WAN Manager privilege escalation in web UI](https://junglewise.ai/threats/cve-2026-20209-cisco-catalyst-sd-wan-manager-privilege-escalation-in-web-ui) (medium, CVSS 5.4, published 14 May 2026) - [CVE-2026-20182: Cisco Catalyst SD-WAN authentication bypass in peering mechanism](https://junglewise.ai/threats/cve-2026-20182-cisco-catalyst-sd-wan-authentication-bypass-in-peering-mechanism) (critical, exploited in the wild, CVSS 10, published 14 May 2026) - [CVE-2026-20133: Cisco Catalyst SD-WAN Manager information disclosure](https://junglewise.ai/threats/cve-2026-20133-cisco-catalyst-sd-wan-manager-information-disclosure) (critical, exploited in the wild, CVSS 7.5, published 20 Apr 2026) - [CVE-2026-20122: Cisco Catalyst SD-WAN Manager arbitrary file overwrite via API](https://junglewise.ai/threats/cve-2026-20122-cisco-catalyst-sd-wan-manager-arbitrary-file-overwrite-via-api) (critical, exploited in the wild, CVSS 5.4, published 20 Apr 2026) - [CVE-2026-20128: Cisco Catalyst SD-WAN Manager recoverable password storage in DCA](https://junglewise.ai/threats/cve-2026-20128-cisco-catalyst-sd-wan-manager-recoverable-password-storage-in-dca) (critical, exploited in the wild, CVSS 7.5, published 20 Apr 2026) - [CVE-2026-20108: Cisco Catalyst SD-WAN Manager XSS in web management interface](https://junglewise.ai/threats/cve-2026-20108-cisco-catalyst-sd-wan-manager-xss-in-web-management-interface) (medium, CVSS 5.4, published 25 Mar 2026) - [CVE-2026-20127: Cisco Catalyst SD-WAN auth bypass in peering authentication](https://junglewise.ai/threats/cve-2026-20127-cisco-catalyst-sd-wan-auth-bypass-in-peering-authentication) (critical, exploited in the wild, CVSS 10, published 25 Feb 2026) ## Most severe Cisco Catalyst SD-WAN Manager vulnerabilities - [CVE-2026-20182: Cisco Catalyst SD-WAN authentication bypass in peering mechanism](https://junglewise.ai/threats/cve-2026-20182-cisco-catalyst-sd-wan-authentication-bypass-in-peering-mechanism) (critical, exploited in the wild, CVSS 10, published 14 May 2026) - [CVE-2026-20127: Cisco Catalyst SD-WAN auth bypass in peering authentication](https://junglewise.ai/threats/cve-2026-20127-cisco-catalyst-sd-wan-auth-bypass-in-peering-authentication) (critical, exploited in the wild, CVSS 10, published 25 Feb 2026) - [CVE-2026-76504: Cisco Catalyst SD-WAN Manager API authentication bypass](https://junglewise.ai/threats/cve-2026-76504-a-vulnerability-in-the-api-session-based-authentication) (critical, exploited in the wild, CVSS 9.8, published 30 Sep 2026) - [CVE-2026-20245: Cisco Catalyst SD-WAN Manager privilege escalation in CLI](https://junglewise.ai/threats/cve-2026-20245-cisco-catalyst-sd-wan-manager-privilege-escalation-in-cli) (critical, exploited in the wild, CVSS 7.8, published 4 Jun 2026) - [CVE-2026-20133: Cisco Catalyst SD-WAN Manager information disclosure](https://junglewise.ai/threats/cve-2026-20133-cisco-catalyst-sd-wan-manager-information-disclosure) (critical, exploited in the wild, CVSS 7.5, published 20 Apr 2026) - [CVE-2026-20128: Cisco Catalyst SD-WAN Manager recoverable password storage in DCA](https://junglewise.ai/threats/cve-2026-20128-cisco-catalyst-sd-wan-manager-recoverable-password-storage-in-dca) (critical, exploited in the wild, CVSS 7.5, published 20 Apr 2026) - [CVE-2026-20262: Cisco Catalyst SD-WAN Manager arbitrary file write in web UI](https://junglewise.ai/threats/cve-2026-20262-cisco-catalyst-sd-wan-manager-arbitrary-file-write-in-web-ui) (critical, exploited in the wild, CVSS 6.5, published 15 Jun 2026) - [CVE-2026-20122: Cisco Catalyst SD-WAN Manager arbitrary file overwrite via API](https://junglewise.ai/threats/cve-2026-20122-cisco-catalyst-sd-wan-manager-arbitrary-file-overwrite-via-api) (critical, exploited in the wild, CVSS 5.4, published 20 Apr 2026) - [CVE-2026-20224: Cisco Catalyst SD-WAN Manager XXE in web UI](https://junglewise.ai/threats/cve-2026-20224-cisco-catalyst-sd-wan-manager-xxe-in-web-ui) (high, CVSS 8.6, published 14 May 2026) - [CVE-2026-20294: Cisco Catalyst SD-WAN Manager information disclosure in web interface](https://junglewise.ai/threats/cve-2026-20294-cisco-catalyst-sd-wan-manager-information-disclosure-in-web) (medium, CVSS 6.5, published 5 Aug 2026) ## Vulnerabilities per week Nothing in the last four weeks, down from 1 vulnerability in the four before. 0 critical against 1, 0 exploited in the wild against 1. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 1 | 1 | 1 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Cisco technologies - [Cisco IOS](https://junglewise.ai/threats/technologies/ios): 70 vulnerabilities - [Cisco Identity Services Engine](https://junglewise.ai/threats/technologies/identity-services-engine): 58 vulnerabilities - [Cisco IOS XE](https://junglewise.ai/threats/technologies/ios-xe): 57 vulnerabilities - [Cisco Firepower Threat Defense](https://junglewise.ai/threats/technologies/firepower-threat-defense): 33 vulnerabilities - [Cisco Firepower Threat Defense Software](https://junglewise.ai/threats/technologies/firepower-threat-defense-software): 33 vulnerabilities - [Cisco IOS XR](https://junglewise.ai/threats/technologies/ios-xr): 31 vulnerabilities - [Cisco IOS XE Software](https://junglewise.ai/threats/technologies/ios-xe-software): 28 vulnerabilities - [Cisco Adaptive Security Appliance Software](https://junglewise.ai/threats/technologies/secure-firewall-asa-software): 23 vulnerabilities - [Cisco Snort 3](https://junglewise.ai/threats/technologies/snort-3): 20 vulnerabilities - [Cisco Ios Software](https://junglewise.ai/threats/technologies/ios-software): 19 vulnerabilities - [Cisco ISE Passive Identity Connector](https://junglewise.ai/threats/technologies/ise-passive-identity-connector): 19 vulnerabilities - [Cisco Secure Firewall Management Center](https://junglewise.ai/threats/technologies/secure-firewall-management-center): 16 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Cisco Catalyst SD-WAN Manager vulnerabilities", https://junglewise.ai/threats/technologies/catalyst-sd-wan-manager, 11 November 2026.