CVE-2026-20182

Cisco Catalyst SD-WAN Controller allows unauthenticated remote attackers to bypass authentication and gain administrative privileges.

This authentication bypass vulnerability enables remote attackers to escalate privileges without credentials, posing a severe risk to DIB organizations relying on Cisco SD-WAN for network control. The vulnerability is actively exploited in the wild and linked to ransomware campaigns, making it a critical compliance failure for FedRAMP vendors and hardware suppliers. Organizations must immediately patch affected systems and audit access controls to prevent unauthorized administrative access.

Shame score — Active exploitation in the wild combined with ransomware linkage and unauthenticated remote access to administrative privileges represents a severe, avoidable security failure.