Skip to content
VulniPulse
Sign in
High8.6Cisco

High [CVE-2026-20209 +2] Cisco Catalyst SD-WAN Manager Vulnerabilities

This high-severity Cisco advisory covers CVE-2026-20209 and CVE-2026-20210 and 1 more CVE affecting Catalyst SD-WAN Manager.

cisco-sa-sdwan-mltvnps2-JxpWm7R Published May 14, 2026Updated by vendor May 14, 2026
CVE-2026-20209CVE-2026-20210CVE-2026-20224
Affected products & platforms
CiscoSD-WANCatalyst SD-WANvManage
Open vendor advisory

Android app · Google Play

Monitor future Cisco CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery
Get CVE alertsSee app features

Summary

Multiple vulnerabilities in Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow a remote attacker to gain access to sensitive information, elevate privileges, or gain unauthorized access to the application.

For more information about these vulnerabilities, see the Details section of this advisory.

Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.

Cisco strongly recommends that customers upgrade to the fixed software indicated in this advisory.

Affected versions
  • Scope: These vulnerabilities affect Cisco Catalyst SD-WAN Manager, regardless of device configuration.
  • Earlier than 20.91 — Migrate to a fixed release
  • Release 20.9 (first fixed: 20.9.9.1)
  • Release 20.10 (first fixed: 20.12.7.1)
  • Release 20.111 (first fixed: 20.12.7.1)
  • Release 20.12 (first fixed: 20.12.5.4)
  • Release 20.12.6.2 (first fixed: 20.12.7.1)
  • Release 20.131 (first fixed: 20.15.5.2)
  • Release 20.141 (first fixed: 20.15.5.2)
  • Release 20.15 (first fixed: 20.15.4.4)
  • Release 20.15.5.2 (first fixed: 20.161)
  • Release 20.18.2.2 (first fixed: 20.18)
  • Release 20.18.2.2 (first fixed: 26.1)

Official advisory · high-confidence parse· fetched 2 months ago·verify at source

Fixed versions
  • 20.9.9.1
  • 20.12.7.1
  • 20.12.5.4
  • 20.15.5.2
  • 20.15.4.4
  • 20.161
  • 20.18
  • 26.1

Official advisory · high-confidence parse· fetched 2 months ago·verify at source

Mitigation checklist

Recommended fix / mitigation
  • Cisco strongly recommends that customers upgrade to the fixed software indicated in this advisory.
Workaround status
  • There are no workarounds that address these vulnerabilities.

Official advisory · high-confidence parse· fetched 2 months ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.

Sign in to join the discussion.