CVE-2026-20127 is a critical authentication bypass vulnerability affecting Cisco Catalyst SD-WAN Controller and Manager, allowing an unauthenticated, remote attacker to gain administrative privileges due to a flaw in the peering authentication mechanism. With a CVSS score of 10.0 Critical, this vulnerability has a network attack vector and low complexity, enabling an attacker to achieve full administrative control over the SD-WAN fabric, including manipulating network configurations. This vulnerability is actively exploited in the wild, listed on CISA's KEV catalog and Hot List, and has garnered significant community and media attention, underscoring its immediate threat.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 20.9.8.2CPE matchmatch criteria | cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:* | ||
>= 20.11, < 20.12.5.3CPE matchmatch criteria | cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:* | ||
>= 20.13, < 20.15.4.2CPE matchmatch criteria | cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:* | ||
>= 20.16, < 20.18.2.1CPE matchmatch criteria | cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:* | ||
20.12.6CPE matchmatch criteria | cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.12.6:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.