Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected system. This vulnerability exists because the peering authentication mechanism in an affected system is not working properly. An attacker could exploit this vulnerability by sending crafted requests to an affected system. A successful exploit could all
Read at Cisco PSIRT Security Advisories
- Vendor
- Cisco
- Product
- IOS XE / IOS XR / NX-OS
- EPSS
- 0.89 (p100)
- Exposure class
- Edge / VPN / firewall
Why it ranks 53 (High)
- EPSS 0.89 (high probability of exploitation)
- Exposed product class: edge / VPN / firewall
- Widely deployed vendor product (Cisco)
- Covered by 3 independent sources
- Vendor security advisory
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Cisco PSIRT Security Advisories (sec.cloudapps.cisco.com)
- CVE-2026-20127 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.