PT-2026-40960 · Cisco · Catalyst Sd-Wan Manager

Elise Imison · Published 2026-05-14 · Updated 2026-05-17 · CVE-2026-20209

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cisco Catalyst SD-WAN Manager versions prior to 26.0.1

Description A flaw in the web UI of Cisco Catalyst SD-WAN Manager allows an authenticated remote attacker with read-only permissions to elevate their privileges to a high-privileged level. This occurs because sensitive session information is recorded in audit logs, which an attacker can exploit to perform unauthorized actions with elevated permissions.

Recommendations Update to version 26.0.1 or later.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

CWE-779

Related Identifiers

BDU:2026-07105

CVE-2026-20209

Affected Products

Catalyst Sd-Wan Manager

References · 6

• https://bdu.fstec.ru/vul/2026-07105 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa-EHchtZk · Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-mltvnps2-JxpWm7R · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-20209 · Security Note
• https://twitter.com/f1tym1/status/2055931208257744951 · Twitter Post
• https://cybersecurity-help.cz/vdb/vulns/131452 · Note