Cisco Catalyst SD-WAN Controller, Catalyst SD-WAN Manager, and Catalyst SD-WAN Validator Authenticated Privilege Escalation Vulnerability
A vulnerability in the CLI of Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an authenticated, local attacker to execute arbitrary commands as root by supplying a crafted file to the affected system. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by uploading a crafted file to the affected system. A successful exploit could allow the attacker to perform command injection attacks on a
Read at Cisco PSIRT Security Advisories
- Vendor
- Cisco
- Product
- IOS XE / IOS XR / NX-OS
- EPSS
- 0.89 (p100)
- Fix
- available
- Exposure class
- Edge / VPN / firewall
Why it ranks 58 (High)
- EPSS 0.89 (high probability of exploitation)
- Exposed product class: edge / VPN / firewall
- Widely deployed vendor product (Cisco)
- Covered by 3 independent sources
- Fix available
- Vendor security advisory
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Cisco PSIRT Security Advisories (sec.cloudapps.cisco.com)
- CVE-2026-20182 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-20127 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-20245 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.