PT-2026-46400 · Cisco · Catalyst Sd-Wan Manager

Published 2026-06-04 · Updated 2026-06-05 · CVE-2026-20245

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco Catalyst SD-WAN Manager (affected versions not specified)

Description Insufficient validation of user-supplied input in the CLI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, allows an authenticated local attacker with netadmin privileges to execute arbitrary commands as root. This is achieved by uploading a crafted file to the system, leading to command injection and privilege escalation. Limited cases have been observed where this issue resulted in configuration changes being pushed to edge devices.

Recommendations Upgrade to the fixed software documented in the advisory published on May 14, 2026, and verify the configuration of the edge devices.

Fix

Improper Encoding or Escaping of Output

Weakness Enumeration

CWE-116

Related Identifiers

CVE-2026-20245

Affected Products

Catalyst Sd-Wan Manager

References · 4

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SW · Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-privesc-4uxFrdzx · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-20245 · Security Note
• https://twitter.com/KaitanSecurity/status/2062685841864917228 · Twitter Post