Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
May 2026: This security advisory provides the details and fix information for a vulnerability that was discovered and fixed after the Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability was disclosed in February 2026. This new advisory is for a new vulnerability in the control connection handshaking. The Indicators of Compromise section of this advisory includes Show Control Connections guidance to help with system checks. A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vM
Read at Cisco PSIRT Security Advisories
- Vendor
- Cisco
- Product
- IOS XE / IOS XR / NX-OS
- Fix
- available
- Exposure class
- Edge / VPN / firewall
Why it ranks 31 (Notable)
- Exposed product class: edge / VPN / firewall
- Widely deployed vendor product (Cisco)
- Fix available
- Vendor security advisory
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Cisco PSIRT Security Advisories (sec.cloudapps.cisco.com)
- CVE-2026-20182 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.