EXPOSURES › CVE-2026-20262
CVE-2026-20262
HIGH ⌖ ON CISA KEV · EXPLOITEDCisco Catalyst SD-WAN Manager allows authenticated attackers to overwrite arbitrary files via path traversal.
This vulnerability enables file overwriting on the SD-WAN Manager filesystem, posing a significant risk to DIB organizations relying on Cisco SD-WAN for secure network management. While requiring authentication, the ability to overwrite files could facilitate privilege escalation or data exfiltration, necessitating immediate vendor patching and network segmentation. DIB orgs must verify vendor remediation timelines and restrict SD-WAN Manager access to trusted networks.
Shame score — A known path traversal vulnerability in a critical network management product that allows file overwriting, though it requires authentication and is not a zero-day.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Cisco Catalyst SD-WAN Manager contains a directory or path traversal vulnerability that could allow an authenticated, remote attacker to create a file or overwrite any file on the filesystem of an affected system.
| PRODUCT | STATUS |
|---|---|
| AppDynamics GovAPM AppDynamics (a Cisco company) |
Authorized |
| Cisco Cloudlock for Government Cisco Systems Inc. |
Authorized |
| Cisco Meraki for Government Cisco Systems Inc. |
In Process |
| Cisco SD-WAN for Government Cisco Systems Inc. |
In Process |
| Cisco Umbrella for Government Cisco Systems Inc. |
In Process |
| Cisco Unified Communications Manager Cloud for Government (Cisco UCM Cloud for Government) Cisco Systems Inc. |
Authorized |
| Duo Federal Duo Security (A Cisco Company) |
Authorized |
| WebEx Contact Center Enterprise for Government (WxCCE-G) Cisco Systems Inc. |
In Process |
| Webex for Government Cisco Systems Inc. |
Authorized |