PT-2026-40959 · Cisco · Catalyst Sd-Wan Manager+1

Published 2026-05-14 · Updated 2026-05-14 · CVE-2026-20182

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco Catalyst SD-WAN Controller (affected versions not specified) Cisco Catalyst SD-WAN Manager (affected versions not specified)

Description A flaw in the peering authentication mechanism of Cisco Catalyst SD-WAN Controller (formerly SD-WAN vSmart) and Cisco Catalyst SD-WAN Manager (formerly SD-WAN vManage) allows an unauthenticated remote attacker to bypass authentication. By sending crafted requests, an attacker can obtain administrative privileges, logging into the Controller as an internal, high-privileged, non-root user account. This access enables the manipulation of network configuration for the SD-WAN fabric via NETCONF (Network Configuration Protocol, a protocol used to install, manipulate, and delete the configuration of network devices). There are reports of active exploitation of this issue to gain unauthorized access to management interfaces.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2026-20182

Affected Products

Catalyst Sd-Wan Controller

Catalyst Sd-Wan Manager

References · 9

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SW · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-20182 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa-EHchtZk · Vendor Advisory
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20182 · Note
• https://reddit.com/r/Cisco/comments/1td4y1i/multiple_critical_cves_on_cisco_catalyst_sdwan · Reddit Post
• https://t.me/thehackernews/9007 · Telegram Post
• https://reddit.com/r/SecOpsDaily/comments/1td4f6z/ongoing_exploitation_of_cisco_catalyst_sdwan · Reddit Post
• https://reddit.com/r/SecOpsDaily/comments/1td4gpz/the_dark_side_of_efficiency_when_network · Reddit Post
• https://reddit.com/r/SecOpsDaily/comments/1td4g70/cve202620182_critical_authentication_bypass_in · Reddit Post