CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2026-201225.4/MEDIUMEPSS 25.8%CISA KEV
2026-02-25

Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite and Privilege Escalation Vulnerability (CVE-2026-20122)

[Affected Scope] Cisco Catalyst SD-WAN Manager (formerly vManage) API interface

[Impact] Authenticated remote attackers with read-only API credentials can overwrite arbitrary files on the local file system and gain vmanage user privileges

[Mitigation] Apply official Cisco security patches immediately, restrict API access, and audit API permissions for low-privileged accounts

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse