CVE-2026-20245

Vendor

Cisco

Product

Catalyst SD-WAN Manager

EPSS

0.89 (p100)

CISA KEV

listed

Exposure class

Edge / VPN / firewall

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 63
   KEV CISA KEV 9 Jun 2026

   Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability

   Cisco Catalyst SD-WAN Manager formerly SD-WAN vManage contains an improper encoding or escaping of output vulnerability. This vulnerability could allow an authenticated, local attacker to execute arbitrary commands as root by…

   KEV Fix available CVE-2026-20245 Cisco
2. 74
   Threat intelligence Google TIG 24 Jun 2026

   Zero-Day Exploitation of Vulnerability (CVE-2026-20245) in Cisco Catalyst SD-WAN Manager

   Written by: Chester Sng, Pete Boonyakarn, Logeswaran Nadarajan, Lukasz Lamparski Introduction In early 2026, Mandiant identified a threat actor targeting SD-WAN infrastructure at a service provider. After gaining initial access…

   Exploited EPSS 0.89 CVE-2026-20245CVE-2026-20127CVE-2026-20182 Cisco
3. 58
   Cisco advisory Cisco PSIRT 12 Jun 2026

   Cisco Catalyst SD-WAN Controller, Catalyst SD-WAN Manager, and Catalyst SD-WAN Validator Authenticated Privilege Escalation Vulnerability

   A vulnerability in the CLI of Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an…

   EPSS 0.89 Fix available CVE-2026-20182CVE-2026-20127CVE-2026-20245 Cisco