CVEFinder.io

CVE-2026-20209

🔶 medium
🔍 Scan for this CVE
Summary

A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker with read-only permissions to elevate their privileges from low to high and perform actions as a high-privileged user. This vulnerability exists because sensitive session information is recorded in audit logs. An attacker could exploit this vulnerability by elevating their read-only permissions in Cisco Catalyst SD-WAN Manager to those of a high-privileged use

Description

A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker with read-only permissions to elevate their privileges from low to high and perform actions as a high-privileged user.

This vulnerability exists because sensitive session information is recorded in audit logs. An attacker could exploit this vulnerability by elevating their read-only permissions in Cisco Catalyst SD-WAN Manager to those of a high-privileged user. A successful exploit could allow the attacker to perform actions as a high-privileged user.

CVSS Score
5.4
Medium
EPSS Score
0.2
Exploit Probability
Published Date
2026-05-14
First Seen: 2026-05-17
📊 Relative Risk Intelligence

This CVE is Lower Risk - more severe than 22.2% of all 360,729 vulnerabilities in our database.

#280,542
Below average severity
Severity Percentile
🎯 CISA SSVC Assessment Updated: May 14, 2026
🔍 Exploitation Status
None
No known exploits
⚙️ Automatable
NO
Requires human interaction
💥 Technical Impact
Total
Complete system compromise possible
SSVC data provided by CISA
Last Modified 2026-06-29
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CWE IDs (Weakness Types)
CWE-779

📦 Affected Products 8

Vendor Product Status Affected Versions
cisco catalyst_sd-wan_manager Affected
> 20.10 < 20.12.5.4
cisco catalyst_sd-wan_manager Affected
> 20.12.6 < 20.12.6.2
cisco catalyst_sd-wan_manager Affected
> 20.13 < 20.15.4.4
cisco catalyst_sd-wan_manager Affected
> 20.15.5 < 20.15.5.2
cisco catalyst_sd-wan_manager Affected
> 20.16 < 20.18.2.2
cisco catalyst_sd-wan_manager Affected
< 20.9.9.1
cisco catalyst_sd-wan_manager Affected
> 26.1 < 26.1.1.1
cisco catalyst_sd-wan_manager Affected
v20.12.7

🔗 References 2

https://sec.cloudapps.cisco.com/security/center/cont...
Vendor Advisory
https://sec.cloudapps.cisco.com/security/center/cont...
Not Applicable

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-20262 🔶 medium 6.5 28.2 A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, r... 2026-06-15
CVE-2026-20245 ⚠️ high 7.8 25.3 A vulnerability in the CLI of Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, f... 2026-06-04
CVE-2026-20182 ⛔ critical 10.0 77.9 May 2026: This security advisory provides the details and fix information for a vulnerability that was discovered and fi... 2026-05-14
CVE-2026-20210 🔶 medium 5.4 0.2 A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, r... 2026-05-14
CVE-2026-20224 ⚠️ high 8.6 0.7 A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenticated,... 2026-05-14
CVE-2026-20108 🔶 medium 5.4 0.2 A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow an authenticated, rem... 2026-03-25
These CVEs affect the same products