CVE-2026-20129 - Vulnerability Analysis

Overview

Cisco Catalyst SD-WAN Manager < 20.18 contains a broken authentication caused by improper authentication in API user requests, letting unauthenticated remote attackers gain netadmin role privileges, exploit requires crafted API request.

Severity & Score

Impact

Unauthenticated attackers can gain netadmin privileges and execute commands, potentially compromising the entire system.

Mitigation

Upgrade to version 20.18 or later.

References

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner