← Back to browse · API

CVE-2026-20122

Severity
MEDIUM
CVSS
5.4
EPSS
0.24585
Risk score
55.2
CISA KEV
Yes
PoC
No
Published
2026-04-20
Modified
2026-04-20
First seen
2026-08-07
Aliases
EUVD-2026-8673, GHSA-9QPV-49Q8-9CHX
Products
Cisco:Catalyst SD-WAN Manger, Cisco:Cisco Catalyst SD-WAN Manager 17.2.7, Cisco:Cisco Catalyst SD-WAN Manager 18.3.5, Cisco:Cisco Catalyst SD-WAN Manager 18.3.6, Cisco:Cisco Catalyst SD-WAN Manager 18.3.7, Cisco:Cisco Catalyst SD-WAN Manager 18.4.1, Cisco:Cisco Catalyst SD-WAN Manager 18.4.303, Cisco:Cisco Catalyst SD-WAN Manager 20.1.3.1, Cisco:Cisco Catalyst SD-WAN Manager 20.10.1.1, Cisco:Cisco Catalyst SD-WAN Manager 20.12.1_LI_Images, Cisco:Cisco Catalyst SD-WAN Manager 20.12.2, Cisco:Cisco Catalyst SD-WAN Manager 20.12.4.1_LI_Images, Cisco:Cisco Catalyst SD-WAN Manager 20.12.5, Cisco:Cisco Catalyst SD-WAN Manager 20.12.5.1.01, Cisco:Cisco Catalyst SD-WAN Manager 20.12.5_LI_Images, Cisco:Cisco Catalyst SD-WAN Manager 20.16.1_LI_Images, Cisco:Cisco Catalyst SD-WAN Manager 20.3.2, Cisco:Cisco Catalyst SD-WAN Manager 20.3.2_929, Cisco:Cisco Catalyst SD-WAN Manager 20.3.3.0.16, Cisco:Cisco Catalyst SD-WAN Manager 20.3.3.1.1, Cisco:Cisco Catalyst SD-WAN Manager 20.3.4.0.25, Cisco:Cisco Catalyst SD-WAN Manager 20.3.4.1, Cisco:Cisco Catalyst SD-WAN Manager 20.3.7, Cisco:Cisco Catalyst SD-WAN Manager 20.4.2.2.8, Cisco:Cisco Catalyst SD-WAN Manager 20.6.1.1, Cisco:Cisco Catalyst SD-WAN Manager 20.6.3.0.14, Cisco:Cisco Catalyst SD-WAN Manager 20.6.3.0.33, Cisco:Cisco Catalyst SD-WAN Manager 20.6.3.0.39, Cisco:Cisco Catalyst SD-WAN Manager 20.6.3.3, Cisco:Cisco Catalyst SD-WAN Manager 20.6.5, Cisco:Cisco Catalyst SD-WAN Manager 20.6.5.1, Cisco:Cisco Catalyst SD-WAN Manager 20.6.5.1.10, Cisco:Cisco Catalyst SD-WAN Manager 20.6.5.1.3, Cisco:Cisco Catalyst SD-WAN Manager 20.6.5.1.6, Cisco:Cisco Catalyst SD-WAN Manager 20.6.5.1.9, Cisco:Cisco Catalyst SD-WAN Manager 20.6.5.2.3, Cisco:Cisco Catalyst SD-WAN Manager 20.6.6, Cisco:Cisco Catalyst SD-WAN Manager 20.6.8, Cisco:Cisco Catalyst SD-WAN Manager 20.7.1, Cisco:Cisco Catalyst SD-WAN Manager 20.7.1.0.2, Cisco:Cisco Catalyst SD-WAN Manager 20.9.1, Cisco:Cisco Catalyst SD-WAN Manager 20.9.3.0.20, Cisco:Cisco Catalyst SD-WAN Manager 20.9.3.0.24, Cisco:Cisco Catalyst SD-WAN Manager 20.9.3.0.25, Cisco:Cisco Catalyst SD-WAN Manager 20.9.4.1, Cisco:Cisco Catalyst SD-WAN Manager 20.9.4.1.3, Cisco:Cisco Catalyst SD-WAN Manager 20.9.4_LI_Images, Cisco:Cisco Catalyst SD-WAN Manager 20.9.5.1, Cisco:Cisco Catalyst SD-WAN Manager 20.9.5.2.16, Cisco:Cisco Catalyst SD-WAN Manager 20.9.6_LI_Images, Cisco:Cisco Catalyst SD-WAN Manager 20.9.8
Sources
euvd EUVD-2026-8673
cisa.gov CVE-2026-20122

Description

Cisco Catalyst SD-WAN Manager contains an incorrect use of privileged APIs vulnerability due to improper file handling on the API interface of an affected system. An attacker could exploit this vulnerability by uploading a malicious file on the local file system. A successful exploit could allow the attacker to overwrite arbitrary files on the affected system and gain vmanage user privileges.

References