Vulnerability details
CVE-2026-20133
Actively exploited
Cisco Catalyst SD-WAN Manager
CVSS 3.1
6.5Medium
Official description
A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system. This vulnerability is due to insufficient file system restrictions. An authenticated attacker with netadmin privileges could exploit this vulnerability by accessing the vshell of an affected system. A successful exploit could allow the attacker to read sensitive information on the underlying operating system.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 6.5Medium | 3.1 | CVEProject cvelistV5 (CNA) (cisco) | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Cisco | Cisco Catalyst SD-WAN Manager | 17.2.10 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 17.2.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 17.2.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 17.2.6 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 17.2.7 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 17.2.8 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 17.2.9 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.2.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.3.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.3.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.3.1.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.3.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.3.3.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.3.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.3.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.3.6.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.3.7 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.3.8 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.4.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.4.0.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.4.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.4.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.4.302 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.4.303 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.4.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.4.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 18.4.6 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 19.1.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 19.2.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 19.2.097 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 19.2.099 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 19.2.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 19.2.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 19.2.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 19.2.31 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 19.2.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 19.2.929 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 19.3.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.1.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.1.1.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.1.12 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.1.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.1.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.10.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.10.1.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.10.1.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.11.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.11.1.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.11.1.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.12.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.12.1_LI_Images | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.12.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.12.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.12.3.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.12.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.12.4.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.12.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.12.5.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.12.5.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.12.6 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.13.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.14.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.15.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.15.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.15.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.15.3.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.15.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.15.4.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.16.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.18.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.18.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.3.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.3.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.3.2.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.3.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.3.3.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.3.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.3.4.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.3.4.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.3.4.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.3.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.3.5.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.3.6 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.3.7 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.3.7.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.3.7.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.3.8 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.4.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.4.1.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.4.1.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.4.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.4.2.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.4.2.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.4.2.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.5.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.5.1.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.5.1.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.6.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.6.1.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.6.1.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.6.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.6.2.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.6.2.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.6.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.6.3.0.45 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.6.3.0.46 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.6.3.0.47 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.6.3.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.6.3.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.6.3.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.6.3.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.6.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.6.4.0.21 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.6.4.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.6.4.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.6.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.6.5.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.6.5.1.10 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.6.5.1.11 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.6.5.1.13 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.6.5.1.7 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.6.5.1.9 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.6.5.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.6.5.2.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.6.5.2.8 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.6.5.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.6.5.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.6.5.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.6.6 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.6.7 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.6.8 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.7.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.7.1.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.7.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.8.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.9.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.9.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.9.2.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.9.2.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.9.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.9.3.0.12 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.9.3.0.16 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.9.3.0.17 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.9.3.0.18 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.9.3.0.20 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.9.3.0.21 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.9.3.0.23 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.9.3.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.9.3.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.9.3.2_LI_Images | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.9.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.9.4.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.9.4_LI_Images | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.9.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.9.5.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.9.5.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.9.5.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.9.6 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.9.7 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.9.7.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | 20.9.8 | CVEProject cvelistV5 (CNA) |
References and advisories
2
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-02-25
- Last updated
- 2026-04-22
- State
- Published
- Assigner (CNA)
- cisco
- Kolun priority
- 83 · Critical
CISA KEV catalog
- Date added
- 2026-04-20
- Due date
- 2026-04-23
- Used in ransomware
- Unknown
Exploit prediction (EPSS)
35.29%
Probability of exploitation in 30 days
98.4%
Percentile (among all CVEs)
- 2026-11-0435.29%
- 2026-11-0331.47%
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- Active
- Technical impact
- Partial
Weaknesses (CWE)
- CWE-200Exposure of Sensitive Information to an Unauthorized Actor