CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

1 advisories matched

CVE-2026-201287.5/HIGHEPSS 94.0%CISA KEV

2026-02-25

Cisco Catalyst SD-WAN Manager Data Collection Agent (DCA) Credential Exposure Vulnerability (CVE-2026-20128)

[Affected Scope] Cisco Catalyst SD-WAN Manager releases prior to 20.18

[Impact] Unauthenticated, remote attackers can retrieve the DCA password file via crafted HTTP requests and gain unauthorized DCA user privileges

[Mitigation] Immediately upgrade Cisco Catalyst SD-WAN Manager to release 20.18 or later