CVE-2026-20122

Cisco Catalyst SD-WAN Manager allows attackers to overwrite arbitrary files and gain vmanage privileges via local file upload.

This vulnerability stems from improper file handling in the API interface, enabling attackers to overwrite arbitrary files and escalate to vmanage user privileges. For DIB organizations, this poses a significant risk as it bypasses standard access controls and allows privilege escalation within the SD-WAN management plane. Organizations must patch immediately and restrict local file system access to prevent exploitation.

Shame score — A local file upload vulnerability that allows privilege escalation, though not directly remote code execution, still represents a significant security failure.