CVE-2026-20133

Cisco Catalyst SD-WAN Manager allows remote attackers to view sensitive information due to an exposure vulnerability actively exploited in the wild.

This vulnerability exposes sensitive data to unauthorized remote actors, creating a significant data breach risk for DIB organizations relying on Cisco SD-WAN infrastructure. While not an RCE, the active exploitation status and sensitivity of exposed information warrant immediate patching and network segmentation to prevent data leakage.

Shame score — The vulnerability allows unauthorized access to sensitive information rather than full system compromise, and while actively exploited, it does not involve default credentials or known negligence.