CVEFinder.io

CVE-2026-20224

⚠️ high
🔍 Scan for this CVE
Summary

A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenticated, remote attacker to read arbitrary files that are stored in an affected system. The attacker does not need to have valid user credentials. This vulnerability is due to improper handling of XML External Entity (XXE) entries when parsing an XML file. An attacker could exploit this vulnerability by sending a crafted request to an affected system. A successful exploit could allo

Description

A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenticated, remote attacker to read arbitrary files that are stored in an affected system. The attacker does not need to have valid user credentials.

This vulnerability is due to improper handling of XML External Entity (XXE) entries when parsing an XML file. An attacker could exploit this vulnerability by sending a crafted request to an affected system. A successful exploit could allow the attacker to read arbitrary files that are stored in the affected system.

CVSS Score
8.6
High
EPSS Score
0.7
Exploit Probability
Published Date
2026-05-14
First Seen: 2026-05-17
📊 Relative Risk Intelligence

This CVE is High Risk - more severe than 80.2% of all 360,729 vulnerabilities in our database.

#71,604
Top 25% most severe
Severity Percentile
🎯 CISA SSVC Assessment Updated: May 14, 2026
🔍 Exploitation Status
None
No known exploits
⚙️ Automatable
YES
Can be exploited automatically
💥 Technical Impact
Partial
Limited system impact
SSVC data provided by CISA
Last Modified 2026-06-29
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CWE IDs (Weakness Types)
CWE-20

📦 Affected Products 8

Vendor Product Status Affected Versions
cisco catalyst_sd-wan_manager Affected
> 20.10 < 20.12.5.4
cisco catalyst_sd-wan_manager Affected
> 20.12.6 < 20.12.6.2
cisco catalyst_sd-wan_manager Affected
> 20.13 < 20.15.4.4
cisco catalyst_sd-wan_manager Affected
> 20.15.5 < 20.15.5.2
cisco catalyst_sd-wan_manager Affected
> 20.16 < 20.18.2.2
cisco catalyst_sd-wan_manager Affected
< 20.9.9.1
cisco catalyst_sd-wan_manager Affected
> 26.1 < 26.1.1.1
cisco catalyst_sd-wan_manager Affected
v20.12.7

🔗 References 2

https://sec.cloudapps.cisco.com/security/center/cont...
Vendor Advisory
https://sec.cloudapps.cisco.com/security/center/cont...
Not Applicable

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-20262 🔶 medium 6.5 28.2 A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, r... 2026-06-15
CVE-2026-20245 ⚠️ high 7.8 25.3 A vulnerability in the CLI of Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, f... 2026-06-04
CVE-2026-20182 ⛔ critical 10.0 77.9 May 2026: This security advisory provides the details and fix information for a vulnerability that was discovered and fi... 2026-05-14
CVE-2026-20209 🔶 medium 5.4 0.2 A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, r... 2026-05-14
CVE-2026-20210 🔶 medium 5.4 0.2 A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, r... 2026-05-14
CVE-2026-20108 🔶 medium 5.4 0.2 A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow an authenticated, rem... 2026-03-25
These CVEs affect the same products