Cisco Cisco Catalyst SD-WAN

Name: Cisco Cisco Catalyst SD-WAN
Brand: Cisco

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

3critical26high5medium0low

updated 2026-10-27

vulnerabilities (37)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-20127US	critical10.0OT critical	89.3% (100th)	KEV	no fix	2026-02-25	≤ vers:unknown/*
CVE-2026-20133US	high7.5OT critical	31.5% (98th)	KEV	no fix	2026-02-25	≤ vers:unknown/*
CVE-2026-20122US	medium5.4OT critical	25.8% (98th)	KEV	no fix	2026-02-25	≤ vers:unknown/*
CVE-2022-20775US	high7.8OT critical	12.5% (96th)	KEV	no fix	2022-09-30	113 versions
CVE-2026-20128US	—OT critical	7.32% (94th)	KEV	no fix	2026-02-25	≤ vers:unknown/*
CVE-2024-6387US	high8.1	99.5% (100th)	Exploit	no fix	2024-07-01	—
CVE-2021-1480US	high7.8	1.81% (78th)	Exploit	no fix	2021-04-08	—
CVE-2022-20818US	high7.8	0.63% (50th)	Exploit	no fix	2022-09-30	—
CVE-2021-1298US	high8.8	2.17% (82nd)	—	no fix	2021-01-20	—
CVE-2021-1300US	critical9.8	2.16% (82nd)	—	no fix	2021-01-20	—
CVE-2021-1301US	critical9.8	2.13% (82nd)	—	no fix	2021-01-20	—
CVE-2021-1274US	high8.6	1.92% (80th)	—	no fix	2021-01-20	—
CVE-2021-1273US	high8.6	1.90% (80th)	—	no fix	2021-01-20	—
CVE-2021-1513US	high7.5	1.52% (74th)	—	no fix	2021-05-06	—
CVE-2021-1263US	high7.8	1.46% (73rd)	—	no fix	2021-01-20	—
CVE-2021-1261US	high7.8	1.45% (73rd)	—	no fix	2021-01-20	—
CVE-2021-1260US	high7.8	1.45% (73rd)	—	no fix	2021-01-20	—
CVE-2021-1279US	high8.6	1.40% (72nd)	—	no fix	2021-01-20	—
CVE-2021-1262US	high7.8	1.36% (72nd)	—	no fix	2021-01-20	—
CVE-2021-1614US	medium5.3	1.19% (68th)	—	no fix	2021-07-22	—
CVE-2023-20262US	high7.5	1.00% (63rd)	—	no fix	2023-09-27	—
CVE-2022-20655US	—	0.83% (57th)	—	no fix	2024-11-15	2 versions
CVE-2026-20129US	—	0.81% (57th)	—	no fix	2026-02-25	≤ vers:unknown/*
CVE-2020-3264US	high7.1	0.73% (54th)	—	no fix	2020-03-19	—
CVE-2020-3265US	high7.8	0.38% (32nd)	—	no fix	2020-03-19	—
CVE-2021-34726US	medium6.7	0.37% (30th)	—	no fix	2021-09-23	—
CVE-2026-20126US	high7.8	0.33% (27th)	—	no fix	2026-02-25	≤ vers:unknown/*
CVE-2021-1514US	high7.8	0.33% (25th)	—	no fix	2021-05-06	—
CVE-2020-3600US	high7.8OT elevated	0.29% (21st)	—	no fix	2020-11-06	—
CVE-2020-3595US	high7.8	0.29% (21st)	—	no fix	2020-11-06	—
CVE-2020-3594US	high7.8	0.29% (21st)	—	no fix	2020-11-06	—
CVE-2020-3593US	high7.8	0.29% (21st)	—	no fix	2020-11-06	—
CVE-2021-1528US	high7.8	0.25% (16th)	—	no fix	2021-06-04	—
CVE-2021-1546US	medium5.5	0.23% (14th)	—	no fix	2021-09-23	—
CVE-2021-1512US	medium6.0	0.23% (14th)	—	no fix	2021-05-06	—
CVE-2022-20716US	high7.8	0.22% (12th)	—	no fix	2022-04-15	—
CVE-2022-20850US	high7.1	0.21% (11th)	—	no fix	2022-09-30	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation12 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer7 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')7 CVEs
CWE-250Execution with Unnecessary Privileges6 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor5 CVEs
CWE-269Improper Privilege Management5 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')3 CVEs

sources (3)

Which sources assert this record, and when.

USCisco PSIRT (CSAF)31 CVEs
NLNCSC-NL (CSAF)6 CVEs
EUEU Vulnerability Database (ENISA)2 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan