CVE-2026-20209
Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability
Severity
Medium 5.4
CVSS 3.1
Exploited
Not listed
EPSS
0.002
9.4th percentile
Discovered by
Third party
Published by the vendor
Published
May 14, 2026
Assigned by cisco
Description
A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker with read-only permissions to elevate their privileges from low to high and perform actions as a high-privileged user. This vulnerability exists because sensitive session information is recorded in audit logs. An attacker could exploit this vulnerability by elevating their read-only permissions in Cisco Catalyst SD-WAN Manager to those of a high-privileged user. A successful exploit could allow the attacker to perform actions as a high-privileged user.
Weakness: CWE-779
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Cisco | Cisco Catalyst SD-WAN Manager | Network & Security Management | cna-assigner |
Vendor-reported affected versions (1)
- Cisco · Cisco Catalyst SD-WAN Manager