CVE-2026-20127

Vendor

Cisco

Product

IOS XE / IOS XR / NX-OS

EPSS

0.89 (p100)

Exposure class

Edge / VPN / firewall

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 74
   Threat intelligence Google TIG 24 Jun 2026

   Zero-Day Exploitation of Vulnerability (CVE-2026-20245) in Cisco Catalyst SD-WAN Manager

   Written by: Chester Sng, Pete Boonyakarn, Logeswaran Nadarajan, Lukasz Lamparski Introduction In early 2026, Mandiant identified a threat actor targeting SD-WAN infrastructure at a service provider. After gaining initial access…

   Exploited EPSS 0.89 CVE-2026-20245CVE-2026-20127CVE-2026-20182 Cisco
2. 60
   Cisco advisory Cisco PSIRT 3d ago

   Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

   A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could…

   EPSS 0.89 Fix available CVE-2026-20127 Cisco
3. 58
   Cisco advisory Cisco PSIRT 12 Jun 2026

   Cisco Catalyst SD-WAN Controller, Catalyst SD-WAN Manager, and Catalyst SD-WAN Validator Authenticated Privilege Escalation Vulnerability

   A vulnerability in the CLI of Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an…

   EPSS 0.89 Fix available CVE-2026-20182CVE-2026-20127CVE-2026-20245 Cisco
4. 53
   Cisco advisory Cisco PSIRT 16 Jun 2026

   Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

   A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could…

   EPSS 0.89 CVE-2026-20127 Cisco
5. 51
   Talos research Talos 3d ago

   Inside KeyDrift: Analyzing historical UAT-11473 activity on Cisco SD-WAN

   Talos has identified UAT-11473, a highly sophisticated APT, who exploited CVE-2026-20127, an authentication bypass vulnerability in Cisco SD-WAN Catalyst Controller instances to bypass authentication and gain unauthorized access…

   EPSS 0.89 CVE-2026-20127 Cisco