CVE-2026-20126 - Vulnerability Analysis

Overview

Cisco Catalyst SD-WAN Manager contains a privilege escalation caused by insufficient user authentication in the REST API, letting authenticated local attackers with low privileges gain root privileges, exploit requires authentication.

Severity & Score

Impact

Authenticated local attackers can gain root privileges on the underlying operating system, leading to full system compromise.

Mitigation

Update to the latest version with fixed REST API authentication mechanism.

References

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner