Cisco Catalyst SD-WAN Manager

Name: Cisco Catalyst SD-WAN Manager
Brand: Cisco

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

2critical2high5medium0low

updated 2026-10-26

vulnerabilities (27)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-20182US	—OT critical	91.8% (100th)	KEV	no fix	2026-05-14	≤ vers:unknown/*
CVE-2026-20127US	critical10.0OT critical	89.3% (100th)	KEV	20.9.8.2	2026-02-25	11 versions
CVE-2026-76504US	critical9.8OT critical	38.9% (99th)	KEV	20.12.8.2	2026-09-30	7 versions
CVE-2026-20262US	—OT critical	29.1% (98th)	KEV	no fix	2026-06-15	≤ vers:unknown/*
CVE-2026-20245US	—OT critical	25.3% (98th)	KEV	no fix	2026-06-04	≤ vers:unknown/*
CVE-2026-20133US	high7.5OT critical	31.5% (98th)	KEV	20.9.8.2	2026-02-25	6 versions
CVE-2026-20122US	medium5.4OT critical	25.8% (98th)	KEV	20.18.2.1	2026-02-25	6 versions
CVE-2026-20128US	—OT critical	7.32% (94th)	KEV	20.12.5.3	2026-02-25	6 versions
CVE-2026-20224US	—	1.09% (65th)	Exploit	20.18.2.2	2026-05-14	9 versions
CVE-2026-20303US	—	0.49% (42nd)	Exploit	20.12.8.1	2026-08-05	8 versions
CVE-2025-20187US	—	1.29% (70th)	—	20.15.2	2025-05-07	< 20.15.2
CVE-2026-20129US	—	0.81% (57th)	—	20.18.2.1	2026-02-25	6 versions
CVE-2026-20310US	—	0.59% (48th)	—	20.12.8.1	2026-08-05	8 versions
CVE-2026-20304US	—	0.42% (36th)	—	20.9.10	2026-08-05	8 versions
CVE-2026-20313US	—	0.42% (36th)	—	26.1.2	2026-08-05	8 versions
CVE-2025-20147US	—	0.40% (34th)	—	20.12.5	2025-05-07	2 versions
CVE-2025-20216US	medium4.3	0.34% (27th)	—	20.12.5	2025-05-07	3 versions
CVE-2026-20126US	high7.8	0.33% (27th)	—	20.12.6.1	2026-02-25	6 versions
CVE-2024-20475US	medium5.4	0.33% (25th)	—	20.15	2024-09-25	2 versions
CVE-2026-20312US	—OT elevated	0.31% (23rd)	—	20.9.10	2026-08-05	8 versions
CVE-2025-20157US	medium5.9	0.29% (22nd)	—	20.9.7	2025-05-07	3 versions
CVE-2026-20294US	—OT elevated	0.21% (12th)	—	20.15.6	2026-08-05	6 versions
CVE-2026-20210US	—	0.19% (9th)	—	20.12.6.2	2026-05-14	9 versions
CVE-2026-20209US	—	0.19% (9th)	—	20.15.4.4	2026-05-14	9 versions
CVE-2025-20213US	medium5.5	0.17% (6th)	—	20.15.2	2025-05-07	4 versions
CVE-2026-20108US	—	0.17% (6th)	—	20.12.5.3	2026-03-25	5 versions
CVE-2025-20122US	—	0.15% (5th)	—	20.12.5	2025-05-07	4 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-200Exposure of Sensitive Information to an Unauthorized Actor6 CVEs
CWE-1284Improper Validation of Specified Quantity in Input3 CVEs
CWE-287Improper Authentication3 CVEs
CWE-779Logging of Excessive Data3 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-648Incorrect Use of Privileged APIs2 CVEs

sources (2)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)24 CVEs
NLNCSC-NL (CSAF)18 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan