CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Cisco Catalyst SD-WAN Manager Arbitrary File Creation and Overwrite Vulnerability (CVE-2026-20262) Advisory
[Affected Scope] Web UI and API endpoints of Cisco Catalyst SD-WAN Manager (formerly SD-WAN vManage)
[Impact] An authenticated remote attacker can create or overwrite arbitrary files on the filesystem, potentially leading to root privilege escalation
[Mitigation] Immediately apply the official Cisco security patches and monitor unauthorized API requests and file upload activities
Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite and Privilege Escalation Vulnerability (CVE-2026-20122)
[Affected Scope] Cisco Catalyst SD-WAN Manager (formerly vManage) API interface
[Impact] Authenticated remote attackers with read-only API credentials can overwrite arbitrary files on the local file system and gain vmanage user privileges
[Mitigation] Apply official Cisco security patches immediately, restrict API access, and audit API permissions for low-privileged accounts