Skip to content
COOEY

FAIL › dossier

Catalyst SD-WAN Manager

PRODUCT

· dossier confidence 20%

Cisco Catalyst SD-WAN Manager is a network management platform for Cisco's SD-WAN infrastructure. Its security posture is critically compromised by a cluster of high-severity vulnerabilities discovered in 2026, including active exploitation of information disclosure flaws and multiple RCEs exploitable by local attackers.

Failure events
5
Zero-days
0
RCEs
2
On KEV
5
Critical
0
Worst shame
85
PROFILE
CategoryNetwork Management SoftwareWhat they doCisco Catalyst SD-WAN Manager is a management platform for Cisco's Software-Defined Wide Area Network (SD-WAN) solutions, providing centralized control and provisioning for SD-WAN deployments. Websitehttps://www.cisco.com/c/en/us/td/docs/routers/sdwan/knowledge-base/CloudOps/cisco-sdwan-cloudops.html ↗
SECURITY POSTURE

The product has a poor security track record, with multiple high-severity vulnerabilities discovered in 2026 including credential exposure, path traversal, remote code execution, and active exploitation of information disclosure flaws.

Notable failures
  • CVE-2026-20128: recoverable password format enabling privilege escalation
  • CVE-2026-20262: authenticated arbitrary file overwrite via path traversal
  • CVE-2026-20245: authenticated local RCE via crafted file uploads
  • CVE-2026-20133: remote information disclosure actively exploited in the wild
Patterns: repeated high-severity vulnerabilities in 2026; vulnerabilities allowing local attackers to escalate privileges or execute commands; active exploitation of information disclosure flaws
FAILURE HISTORY · 5
DATEEVENTSEVSUMMARY
2026-09-30 CVE-2026-76504 high An unauthenticated remote attacker could escalate to admin privileges via improper URI encoding in Cisco Catalyst SD-WAN Manager.
2026-04-20 CVE-2026-20128 high Cisco Catalyst SD-WAN Manager stores passwords in a recoverable format, allowing local attackers to escalate privileges by reading credential files.
2026-06-15 CVE-2026-20262 high Cisco Catalyst SD-WAN Manager allows authenticated attackers to overwrite arbitrary files via path traversal.
2026-06-09 CVE-2026-20245 high Cisco SD-WAN Manager allows authenticated local attackers to execute arbitrary root commands via crafted file uploads.
2026-04-20 CVE-2026-20133 high Cisco Catalyst SD-WAN Manager allows remote attackers to view sensitive information due to an exposure vulnerability actively exploited in the wild.
DOSSIER SOURCES
Open questions: Catalyst SD-WAN Manager is a product, not a company; company-level profile fields (founded, hq, size, ownership, website) are unavailable from the provided evidence.
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-09-06 03:59:22.161482+00:00