Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.4
CVE-2026-20209: Cisco Catalyst SD-WAN Manager Privilege Escalation Risk
CVE-2026-20209 · published 5 months ago
Summary
An attacker with limited access can gain more power in Cisco Catalyst SD-WAN Manager. This is a concern because an attacker could take actions that normally require higher-level access. To protect your network, ensure you have the latest software updates installed and consider implementing additional security measures.
Original advisory text
A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker with read-only permissions to elevate their privileges from lo...
A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker with read-only permissions to elevate their privileges from low to high and perform actions as a high-privileged user.
This vulnerability exists because sensitive session information is recorded in audit logs. An attacker could exploit this vulnerability by elevating their read-only permissions in Cisco Catalyst SD-WAN Manager to those of a high-privileged user. A successful exploit could allow the attacker to perform actions as a high-privileged user.
This vulnerability exists because sensitive session information is recorded in audit logs. An attacker could exploit this vulnerability by elevating their read-only permissions in Cisco Catalyst SD-WAN Manager to those of a high-privileged user. A successful exploit could allow the attacker to perform actions as a high-privileged user.
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Type
CWE-779Logging of Excessive Data
Timeline
Published14 May 2026
Updated4 Nov 2026
First seen14 May 2026
Sources
CVE-2026-20209 · NVD
Track software like this
Free during beta