← Back to browse · API

CVE-2026-20182

Severity
CRITICAL
CVSS
10.0
EPSS
0.90272
Risk score
56.6
CISA KEV
Yes
PoC
Yes
Published
2026-05-14
Modified
2026-06-16
First seen
2026-08-07
Aliases
EUVD-2026-30324, GHSA-P83J-MXPW-GQPJ
Products
Cisco:Catalyst SD-WAN, Cisco:Cisco Catalyst SD-WAN Controller 17.2.10, Cisco:Cisco Catalyst SD-WAN Controller 18.2.0, Cisco:Cisco Catalyst SD-WAN Controller 18.3.3, Cisco:Cisco Catalyst SD-WAN Controller 18.3.8, Cisco:Cisco Catalyst SD-WAN Controller 18.4.3, Cisco:Cisco Catalyst SD-WAN Controller 18.4.303, Cisco:Cisco Catalyst SD-WAN Controller 18.4.4, Cisco:Cisco Catalyst SD-WAN Controller 18.4.5, Cisco:Cisco Catalyst SD-WAN Controller 19.0.0, Cisco:Cisco Catalyst SD-WAN Controller 19.2.1, Cisco:Cisco Catalyst SD-WAN Controller 19.2.2, Cisco:Cisco Catalyst SD-WAN Controller 19.3.0, Cisco:Cisco Catalyst SD-WAN Controller 20.1.12, Cisco:Cisco Catalyst SD-WAN Controller 20.10.1.1, Cisco:Cisco Catalyst SD-WAN Controller 20.11.1.1, Cisco:Cisco Catalyst SD-WAN Controller 20.12.3, Cisco:Cisco Catalyst SD-WAN Controller 20.12.3.1, Cisco:Cisco Catalyst SD-WAN Controller 20.12.4, Cisco:Cisco Catalyst SD-WAN Controller 20.12.5.2, Cisco:Cisco Catalyst SD-WAN Controller 20.13.1, Cisco:Cisco Catalyst SD-WAN Controller 20.15.2, Cisco:Cisco Catalyst SD-WAN Controller 20.15.3, Cisco:Cisco Catalyst SD-WAN Controller 20.15.4.1, Cisco:Cisco Catalyst SD-WAN Controller 20.15.4.5, Cisco:Cisco Catalyst SD-WAN Controller 20.3.4, Cisco:Cisco Catalyst SD-WAN Controller 20.3.5.1, Cisco:Cisco Catalyst SD-WAN Controller 20.3.7, Cisco:Cisco Catalyst SD-WAN Controller 20.3.7.2, Cisco:Cisco Catalyst SD-WAN Controller 20.3.8, Cisco:Cisco Catalyst SD-WAN Controller 20.4.1.1, Cisco:Cisco Catalyst SD-WAN Controller 20.4.2, Cisco:Cisco Catalyst SD-WAN Controller 20.6.3.3, Cisco:Cisco Catalyst SD-WAN Controller 20.6.4, Cisco:Cisco Catalyst SD-WAN Controller 20.6.7, Cisco:Cisco Catalyst SD-WAN Controller 20.6.8, Cisco:Cisco Catalyst SD-WAN Controller 20.9.3, Cisco:Cisco Catalyst SD-WAN Controller 20.9.4, Cisco:Cisco Catalyst SD-WAN Controller 20.9.5, Cisco:Cisco Catalyst SD-WAN Controller 20.9.5.1, Cisco:Cisco Catalyst SD-WAN Controller 20.9.8, Cisco:Cisco Catalyst SD-WAN Controller 20.9.9, Cisco:Cisco Catalyst SD-WAN Manager 17.2.5, Cisco:Cisco Catalyst SD-WAN Manager 18.3.0, Cisco:Cisco Catalyst SD-WAN Manager 18.3.3, Cisco:Cisco Catalyst SD-WAN Manager 18.4.501_ES, Cisco:Cisco Catalyst SD-WAN Manager 19.2.0, Cisco:Cisco Catalyst SD-WAN Manager 19.2.1, Cisco:Cisco Catalyst SD-WAN Manager 19.2.4.0.9, Cisco:Cisco Catalyst SD-WAN Manager 20.1.1, Cisco:Cisco Catalyst SD-WAN Manager 20.1.3.1
Sources
cisa.gov CVE-2026-20182
packetstorm e1b15243aca2ad53b47ce4cf|CVE-2026-20182
euvd EUVD-2026-30324

Description

May 2026: This security advisory provides the details and fix information for a vulnerability that was discovered and fixed after the was disclosed in February 2026. This new advisory is for a new vulnerability in the control connection handshaking. The section of this advisory includes Show Control Connections guidance to help with system checks.  A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected system. This vulnerability exists because the peering authentication mechanism in an affected system is not working properly. An attacker could exploit this vulnerability by sending crafted requests to the affected system. A successful exploit could allow the attacker to log in to an affected Cisco Catalyst SD-WAN Controller as an internal, high-privileged, non-root user account. Using this account, the attacker could access NETCONF, which would then allow the attacker to manipulate network configuration for the SD-WAN fabric.

References