CVE-2026-20133

Name of the Vulnerable Software and Affected Versions Cisco Catalyst SD-WAN Manager (affected versions not specified)

Description An issue in Cisco Catalyst SD-WAN Manager allows an unauthenticated remote attacker to view sensitive information on an affected system. This is caused by insufficient file system access restrictions. An attacker can exploit this by accessing the API of the system to read sensitive information from the underlying operating system. This flaw has been confirmed as exploited in the wild and is included in the CISA Known Exploited Vulnerabilities catalog.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.