CVE-2026-20262

Cisco Catalyst SD-WAN Manager allows authenticated attackers to overwrite arbitrary files via path traversal.

This vulnerability enables file overwriting on the SD-WAN Manager filesystem, posing a significant risk to DIB organizations relying on Cisco SD-WAN for secure network management. While requiring authentication, the ability to overwrite files could facilitate privilege escalation or data exfiltration, necessitating immediate vendor patching and network segmentation. DIB orgs must verify vendor remediation timelines and restrict SD-WAN Manager access to trusted networks.

Shame score — A known path traversal vulnerability in a critical network management product that allows file overwriting, though it requires authentication and is not a zero-day.