CVE-2026-20210
A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker with read-only permissions to modify configurations and perform unauthorized actions on an affected system. This vulnerability exists because of a failure to redact sensitive information within device configurations and templates. An attacker could exploit this vulnerability by elevating their read-only permissions to those of a high-privileged user. A successful exploit could allow the attacker to access or modify configuration settings within Cisco Catalyst SD-WAN Manager as a high-privileged user.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 5.4
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
- EPSS probability
- 0.19%
- CWE
- CWE-779
- Published
- 2026-05-14
- Last modified
- 2026-05-15
Affected products
- Cisco Cisco Catalyst SD-WAN Manager
- Cisco Cisco Catalyst SD-WAN Manager
- Cisco Cisco Catalyst SD-WAN Manager
- Cisco Cisco Catalyst SD-WAN Manager
- Cisco Cisco Catalyst SD-WAN Manager
- Cisco Cisco Catalyst SD-WAN Manager
- Cisco Cisco Catalyst SD-WAN Manager
- Cisco Cisco Catalyst SD-WAN Manager
Weakness type
Related vulnerabilities
- CVE-2026-86200 — PocketMine-MP before 5.42.1 LogDoS via LoginPacket clientData JWT
- CVE-2026-20209 — Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability
- CVE-2026-28718 — Denial of service due to insufficient input validation in authentication logging. The following...
- CVE-2025-69230 — AIOHTTP Vulnerable to Cookie Parser Warning Storm
- CVE-2025-8696 — DoS attack against the Stork UI from an unauthenticated user
- CVE-2025-53636 — Open OnDemand Shell App closed websocket DoS
- CVE-2024-55628 — Suricata oversized resource names utilizing DNS name compression can lead to resource starvation
- CVE-2024-36416 — SuiteCRM v4 API Excessive log data DOS