Skip to content
COOEY

FAIL › dossier

SD-WAN

PRODUCT

· dossier confidence 60%

Cisco Catalyst SD-WAN Manager exhibits a critically compromised security posture, with multiple high-severity vulnerabilities discovered in 2026 including active exploitation of information disclosure flaws and multiple RCEs exploitable by local attackers. The product has a poor security track record, with multiple high-severity vulnerabilities discovered in 2026 including active exploitation of information disclosure flaws and multiple RCEs exploitable by local attackers.

Failure events
3
Zero-days
0
RCEs
1
On KEV
1
Critical
2
Worst shame
90
PROFILE
CategorySD-WANWhat they doCisco Catalyst SD-WAN Manager is a network management platform for Cisco's SD-WAN infrastructure.Founded1984HQSan Jose, California Websitehttps://www.cisco.com ↗
SECURITY POSTURE

The product has a critically compromised security track record, with multiple high-severity vulnerabilities discovered in 2026 including active exploitation of information disclosure flaws and multiple RCEs exploitable by local attackers.

Notable failures
  • CVE-2022-20775: CLI path traversal RCE
  • CVE-2024-26305: Utility daemon buffer overflow
  • CVE-2026-20262: Unauthenticated SSRF actively exploited
Patterns: repeated unpatched edge-device RCEs; centralized controller accepting unauthenticated input reaching privileged functionality; active exploitation of SD-WAN flaws by threat actors
FAILURE HISTORY · 3
DATEEVENTSEVSUMMARY
2026-02-25 CVE-2022-20775 high Cisco SD-WAN CLI exposed to path traversal, allowing local attackers to escalate privileges and execute commands as root.
2024-05-01 CVE-2024-26305 critical CVE-2024-26305: There is a buffer overflow vulnerability in the underlying Utility daemon that c
2022-12-12 CVE-2022-37897 critical CVE-2022-37897: There is a command injection vulnerability that could lead to unauthenticated re
DOSSIER SOURCES
Open questions: Exact size of Cisco Catalyst SD-WAN Manager team · Specifics of CVE-2024-26305 buffer overflow impact
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-09-23 04:41:17.836101+00:00