CVE-2026-20126 - Vulnerability Analysis

Overview

Cisco Catalyst SD-WAN Manager contains a privilege escalation caused by insufficient user authentication in the REST API, letting authenticated local attackers with low privileges gain root privileges, exploit requires authentication.

Severity & Score

Impact

Authenticated local attackers can gain root privileges on the underlying operating system, leading to full system compromise.

Mitigation

Update to the latest version with fixed REST API authentication mechanism.

References

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v

Social Media Activity(1 post)

AA

@AAKL

Mar 18, 2026

New advisory from Cisco addressing critical February 25 vulnerabilities: "There are no workarounds that address these vulnerabilities. Cisco strongly recommends that customers upgrade to the fixed software indicated in this advisory." CVE-2026-20122; CVE-2026-20126; CVE-2026-20128: Cisco Catalyst SD-WAN Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v @TalosSecurity #Cisco #infosec #vulnerability

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner