← Back to browse · API

CVE-2026-20133

Severity
MEDIUM
CVSS
6.5
EPSS
0.31353
Risk score
61.97
CISA KEV
Yes
PoC
No
Published
2026-02-25
Modified
2026-04-22
First seen
2026-08-07
Aliases
EUVD-2026-8678, GHSA-CF88-F64Q-C626
Products
Cisco:Catalyst SD-WAN Manager, Cisco:Cisco Catalyst SD-WAN Manager 17.2.10, Cisco:Cisco Catalyst SD-WAN Manager 17.2.6, Cisco:Cisco Catalyst SD-WAN Manager 18.3.3, Cisco:Cisco Catalyst SD-WAN Manager 18.3.7, Cisco:Cisco Catalyst SD-WAN Manager 18.4.302, Cisco:Cisco Catalyst SD-WAN Manager 18.4.6, Cisco:Cisco Catalyst SD-WAN Manager 19.1.0, Cisco:Cisco Catalyst SD-WAN Manager 19.2.1, Cisco:Cisco Catalyst SD-WAN Manager 19.2.2, Cisco:Cisco Catalyst SD-WAN Manager 19.2.31, Cisco:Cisco Catalyst SD-WAN Manager 20.10.1.2, Cisco:Cisco Catalyst SD-WAN Manager 20.12.3, Cisco:Cisco Catalyst SD-WAN Manager 20.12.3.1, Cisco:Cisco Catalyst SD-WAN Manager 20.12.4.1, Cisco:Cisco Catalyst SD-WAN Manager 20.12.5.1, Cisco:Cisco Catalyst SD-WAN Manager 20.15.1, Cisco:Cisco Catalyst SD-WAN Manager 20.15.4, Cisco:Cisco Catalyst SD-WAN Manager 20.16.1, Cisco:Cisco Catalyst SD-WAN Manager 20.3.1, Cisco:Cisco Catalyst SD-WAN Manager 20.3.2, Cisco:Cisco Catalyst SD-WAN Manager 20.3.2.1, Cisco:Cisco Catalyst SD-WAN Manager 20.3.4, Cisco:Cisco Catalyst SD-WAN Manager 20.3.4.2, Cisco:Cisco Catalyst SD-WAN Manager 20.3.5, Cisco:Cisco Catalyst SD-WAN Manager 20.3.5.1, Cisco:Cisco Catalyst SD-WAN Manager 20.3.7, Cisco:Cisco Catalyst SD-WAN Manager 20.4.1, Cisco:Cisco Catalyst SD-WAN Manager 20.4.2.1, Cisco:Cisco Catalyst SD-WAN Manager 20.6.2.2, Cisco:Cisco Catalyst SD-WAN Manager 20.6.3.0.47, Cisco:Cisco Catalyst SD-WAN Manager 20.6.3.2, Cisco:Cisco Catalyst SD-WAN Manager 20.6.4, Cisco:Cisco Catalyst SD-WAN Manager 20.6.5.1.10, Cisco:Cisco Catalyst SD-WAN Manager 20.6.5.1.11, Cisco:Cisco Catalyst SD-WAN Manager 20.6.5.1.7, Cisco:Cisco Catalyst SD-WAN Manager 20.6.5.1.9, Cisco:Cisco Catalyst SD-WAN Manager 20.6.5.2.4, Cisco:Cisco Catalyst SD-WAN Manager 20.6.5.2.8, Cisco:Cisco Catalyst SD-WAN Manager 20.6.5.4, Cisco:Cisco Catalyst SD-WAN Manager 20.7.1.1, Cisco:Cisco Catalyst SD-WAN Manager 20.9.2, Cisco:Cisco Catalyst SD-WAN Manager 20.9.2.1, Cisco:Cisco Catalyst SD-WAN Manager 20.9.3, Cisco:Cisco Catalyst SD-WAN Manager 20.9.3.0.20, Cisco:Cisco Catalyst SD-WAN Manager 20.9.3.0.23, Cisco:Cisco Catalyst SD-WAN Manager 20.9.3.2_LI_Images, Cisco:Cisco Catalyst SD-WAN Manager 20.9.4.1, Cisco:Cisco Catalyst SD-WAN Manager 20.9.5.2, Cisco:Cisco Catalyst SD-WAN Manager 20.9.7, Cisco:Cisco Catalyst SD-WAN Manager 20.9.7.1
Sources
cisa.gov CVE-2026-20133
euvd EUVD-2026-8678

Description

A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system. This vulnerability is due to insufficient file system restrictions. An authenticated attacker with netadmin privileges could exploit this vulnerability by accessing the vshell of an affected system. A successful exploit could allow the attacker to read sensitive information on the underlying operating system.

References