CVE-2026-20245

Cisco SD-WAN Manager allows authenticated local attackers to execute arbitrary root commands via crafted file uploads.

This vulnerability enables local privilege escalation to root via improper output encoding, posing a severe risk to DIB organizations relying on Cisco SD-WAN infrastructure for network segmentation and control. While requiring local authentication, the ability to execute arbitrary commands as root significantly undermines the integrity of the management plane, necessitating immediate patching and strict access controls.

Shame score — A local privilege escalation vulnerability in a widely deployed network management product that was actively exploited but did not involve remote exploitation or zero-day disclosure.