Vulnerability Intelligence Report
Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
CVE-2026-20133
A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system. This vulnerability is due to insufficient file system restrictions. An authenticated attacker with netadmin privileges could exploit this vulnerability by accessing the vshell of an affected system. A successful exploit could allow the attacker to read sensitive information on the underlying operating system.
CISA KEV
SSVC: Active Exploitation
CVSS Base Score
6.5
MEDIUM
Exploitability:2.9
Impact Score:3.6
EPSS Probability:10.24%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-200 ↗Exposure of Sensitive Information to an Unauthorized Actor
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| Cisco | Cisco Catalyst SD-WAN Manager | 17.2.6 (affected), 17.2.7 (affected), 17.2.8 (affected), 17.2.9 (affected), 17.2.10 (affected), 17.2.4 (affected), 17.2.5 (affected), 18.3.1.1 (affected), 18.3.3.1 (affected), 18.3.3 (affected), 18.3.4 (affected), 18.3.5 (affected), 18.3.7 (affected), 18.3.8 (affected), 18.3.6.1 (affected), 18.3.1 (affected), 18.3.0 (affected), 18.4.0.1 (affected), 18.4.3 (affected), 18.4.302 (affected), 18.4.303 (affected), 18.4.4 (affected), 18.4.5 (affected), 18.4.0 (affected), 18.4.1 (affected), 18.4.6 (affected), 19.2.0 (affected), 19.2.097 (affected), 19.2.099 (affected), 19.2.1 (affected), 19.2.2 (affected), 19.2.3 (affected), 19.2.31 (affected), 19.2.929 (affected), 19.2.4 (affected), 20.1.1.1 (affected), 20.1.12 (affected), 20.1.1 (affected), 20.1.2 (affected), 20.1.3 (affected), 19.3.0 (affected), 19.1.0 (affected), 18.2.0 (affected), 20.3.1 (affected), 20.3.2 (affected), 20.3.2.1 (affected), 20.3.3 (affected), 20.3.3.1 (affected), 20.3.4 (affected), 20.3.4.1 (affected), 20.3.4.2 (affected), 20.3.5 (affected), 20.3.6 (affected), 20.3.7 (affected), 20.3.7.1 (affected), 20.3.4.3 (affected), 20.3.5.1 (affected), 20.3.7.2 (affected), 20.3.8 (affected), 20.4.1 (affected), 20.4.1.1 (affected), 20.4.1.2 (affected), 20.4.2 (affected), 20.4.2.2 (affected), 20.4.2.1 (affected), 20.4.2.3 (affected), 20.5.1 (affected), 20.5.1.2 (affected), 20.5.1.1 (affected), 20.6.1 (affected), 20.6.1.1 (affected), 20.6.2.1 (affected), 20.6.2.2 (affected), 20.6.2 (affected), 20.6.3 (affected), 20.6.3.1 (affected), 20.6.4 (affected), 20.6.5 (affected), 20.6.5.1 (affected), 20.6.5.3 (affected), 20.6.1.2 (affected), 20.6.3.2 (affected), 20.6.4.1 (affected), 20.6.5.2 (affected), 20.6.5.4 (affected), 20.6.3.3 (affected), 20.6.4.2 (affected), 20.6.3.0.45 (affected), 20.6.3.0.46 (affected), 20.6.3.0.47 (affected), 20.6.3.4 (affected), 20.6.4.0.21 (affected), 20.6.5.1.10 (affected), 20.6.5.1.11 (affected), 20.6.5.1.7 (affected), 20.6.5.1.9 (affected), 20.6.5.2.4 (affected), 20.6.5.5 (affected), 20.6.5.2.8 (affected), 20.6.5.1.13 (affected), 20.6.6 (affected), 20.6.7 (affected), 20.6.8 (affected), 20.7.1 (affected), 20.7.1.1 (affected), 20.7.2 (affected), 20.8.1 (affected), 20.9.1 (affected), 20.9.2 (affected), 20.9.2.1 (affected), 20.9.3 (affected), 20.9.3.1 (affected), 20.9.2.3 (affected), 20.9.3.0.12 (affected), 20.9.3.0.16 (affected), 20.9.3.0.17 (affected), 20.9.3.0.18 (affected), 20.9.3.0.20 (affected), 20.9.3.0.21 (affected), 20.9.3.2 (affected), 20.9.3.2_LI_Images (affected), 20.9.4 (affected), 20.9.4_LI_Images (affected), 20.9.3.0.23 (affected), 20.9.4.1 (affected), 20.9.5 (affected), 20.9.5.1 (affected), 20.9.5.2 (affected), 20.9.6 (affected), 20.9.5.3 (affected), 20.9.7 (affected), 20.9.7.1 (affected), 20.9.8 (affected), 20.10.1 (affected), 20.10.1.1 (affected), 20.10.1.2 (affected), 20.11.1 (affected), 20.11.1.1 (affected), 20.11.1.2 (affected), 20.12.1 (affected), 20.12.1_LI_Images (affected), 20.12.2 (affected), 20.12.3 (affected), 20.12.3.1 (affected), 20.12.4 (affected), 20.12.4.1 (affected), 20.12.5 (affected), 20.12.5.1 (affected), 20.12.5.2 (affected), 20.12.6 (affected), 20.13.1 (affected), 20.14.1 (affected), 20.15.1 (affected), 20.15.2 (affected), 20.15.3 (affected), 20.15.3.1 (affected), 20.15.4 (affected), 20.15.4.1 (affected), 20.16.1 (affected), 20.18.1 (affected), 20.18.2 (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Cisco Systems, Inc. · Hosted Service · USA |
| Reserved | 2025-10-08T11:59:15 |
| Published | 2026-02-25T16:13:56 |
| Last Updated | 2026-04-22T15:31:56 |
Community Chatter & Buzz