Cisco Catalyst Sd-wan Manager — known CVE vulnerabilities

Every CVE whose affected-product data names Cisco Catalyst Sd-wan Manager, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (91)

• CVE-2026-20127 — CVSS 10.0 (critical) — actively exploited: A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager…
• CVE-2026-20182 — CVSS 10.0 (critical) — actively exploited: May 2026: This security advisory provides the details and fix information for a vulnerability that was discovered and fixed after the was…
• CVE-2021-1300 — CVSS 9.8 (critical): Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected…
• CVE-2021-1505 — CVSS 9.8 (critical): Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain…
• CVE-2021-1275 — CVSS 9.8 (critical): Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain…
• CVE-2021-1468 — CVSS 9.8 (critical): Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain…
• CVE-2021-1508 — CVSS 9.8 (critical): Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain…
• CVE-2021-1506 — CVSS 9.8 (critical): Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain…
• CVE-2023-20252 — CVSS 9.8 (critical): A vulnerability in the Security Assertion Markup Language (SAML) APIs of Cisco Catalyst SD-WAN Manager Software could allow an…
• CVE-2026-20129 — CVSS 9.8 (critical): A vulnerability in the API user authentication of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain…
• CVE-2021-1301 — CVSS 9.8 (critical): Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected…
• CVE-2023-20214 — CVSS 9.1 (critical): A vulnerability in the request authentication validation for the REST API of Cisco SD-WAN vManage software could allow an unauthenticated…
• CVE-2021-1298 — CVSS 8.8 (high): Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an…
• CVE-2026-20126 — CVSS 8.8 (high): A vulnerability in Cisco Catalyst SD-WAN Manager could allow an authenticated, local attacker with low privileges to gain root privileges…
• CVE-2021-1304 — CVSS 8.8 (high): Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote…
• CVE-2021-1302 — CVSS 8.8 (high): Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote…
• CVE-2021-1299 — CVSS 8.8 (high): Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an…
• CVE-2021-1284 — CVSS 8.8 (high): A vulnerability in the web-based messaging service interface of Cisco SD-WAN vManage Software could allow an unauthenticated, adjacent…
• CVE-2021-1279 — CVSS 8.6 (high): Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS)…
• CVE-2026-20224 — CVSS 8.6 (high): A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenticated, remote attacker to…
• CVE-2021-1241 — CVSS 8.6 (high): Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS)…
• CVE-2021-1273 — CVSS 8.6 (high): Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS)…
• CVE-2021-1274 — CVSS 8.6 (high): Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS)…
• CVE-2021-1278 — CVSS 8.6 (high): Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS)…
• CVE-2020-26071 — CVSS 8.4 (high): A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to create or overwrite arbitrary…
• CVE-2020-26064 — CVSS 8.1 (high): A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain read and write access…
• CVE-2021-1261 — CVSS 7.8 (high): Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an…
• CVE-2021-1260 — CVSS 7.8 (high): Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an…
• CVE-2021-1137 — CVSS 7.8 (high): Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or…
• CVE-2021-1263 — CVSS 7.8 (high): Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an…
• CVE-2021-1262 — CVSS 7.8 (high): Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an…
• CVE-2025-20122 — CVSS 7.8 (high): A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to…
• CVE-2022-20716 — CVSS 7.8 (high): A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain escalated privileges. This…
• CVE-2021-1479 — CVSS 7.8 (high): Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or…
• CVE-2021-1480 — CVSS 7.8 (high): Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or…
• CVE-2021-1528 — CVSS 7.8 (high): A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges on an affected…
• CVE-2021-1514 — CVSS 7.8 (high): A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be…
• CVE-2020-26074 — CVSS 7.8 (high): A vulnerability in system file transfer functions of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to…
• CVE-2022-20775 — CVSS 7.8 (high) — actively exploited: A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. This…
• CVE-2026-20245 — CVSS 7.8 (high) — actively exploited: A vulnerability in the CLI of Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN…
• CVE-2020-26073 — CVSS 7.5 (high): A vulnerability in the application data endpoints of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to…
• CVE-2026-20128 — CVSS 7.5 (high) — actively exploited: A vulnerability in the Data Collection Agent (DCA) feature of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker…
• CVE-2021-1513 — CVSS 7.5 (high): A vulnerability in the vDaemon process of Cisco SD-WAN Software could allow an unauthenticated, remote attacker to cause a device to…
• CVE-2022-20696 — CVSS 7.5 (high): A vulnerability in the binding configuration of Cisco SD-WAN vManage Software containers could allow an unauthenticated, adjacent attacker…
• CVE-2022-20739 — CVSS 7.3 (high): A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to execute arbitrary commands on…
• CVE-2023-20253 — CVSS 7.1 (high): A vulnerability in the command line interface (cli) management interface of Cisco SD-WAN vManage could allow an authenticated, local…
• CVE-2021-1462 — CVSS 6.7 (medium): A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to elevate privileges on an…
• CVE-2022-20930 — CVSS 6.7 (medium): A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite and possibly corrupt files on…
• CVE-2026-20262 — CVSS 6.5 (medium) — actively exploited: A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker to…
• CVE-2020-26065 — CVSS 6.5 (medium): A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to…
• CVE-2020-26066 — CVSS 6.5 (medium): A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain read and write…
• CVE-2020-3592 — CVSS 6.5 (medium): A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to…
• CVE-2021-1232 — CVSS 6.5 (medium): A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker…
• CVE-2021-1484 — CVSS 6.5 (medium): A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to inject arbitrary…
• CVE-2021-1491 — CVSS 6.5 (medium): A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker…
• CVE-2022-20735 — CVSS 6.5 (medium): A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to…
• CVE-2022-20747 — CVSS 6.5 (medium): A vulnerability in the History API of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain access to…
• CVE-2023-20261 — CVSS 6.5 (medium): A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to retrieve arbitrary files…
• CVE-2025-20187 — CVSS 6.5 (medium): A vulnerability in the application data endpoints of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an…
• CVE-2026-20133 — CVSS 6.5 (medium) — actively exploited: A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on an…
• CVE-2021-1482 — CVSS 6.4 (medium): A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker…
• CVE-2020-3587 — CVSS 6.4 (medium): A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to…
• CVE-2024-20475 — CVSS 6.4 (medium): A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an…
• CVE-2021-1483 — CVSS 6.4 (medium): A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain read and write…
• CVE-2020-3590 — CVSS 6.4 (medium): A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to…
• CVE-2020-3579 — CVSS 6.1 (medium): A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to…
• CVE-2021-1512 — CVSS 6.0 (medium): A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in the…
• CVE-2025-20157 — CVSS 5.9 (medium): A vulnerability in certificate validation processing of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an…
• CVE-2021-1546 — CVSS 5.5 (medium): A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to access sensitive information. This…
• CVE-2021-34700 — CVSS 5.5 (medium): A vulnerability in the CLI interface of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to read arbitrary files…
• CVE-2025-20213 — CVSS 5.5 (medium): A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to…
• CVE-2026-20209 — CVSS 5.4 (medium): A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker with…
• CVE-2021-1466 — CVSS 5.4 (medium): A vulnerability in the vDaemon service of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to cause a buffer…
• CVE-2025-20147 — CVSS 5.4 (medium): A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an…
• CVE-2026-20108 — CVSS 5.4 (medium): A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to…
• CVE-2026-20122 — CVSS 5.4 (medium) — actively exploited: A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite arbitrary files on…
• CVE-2026-20210 — CVSS 5.4 (medium): A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker with…
• CVE-2021-34712 — CVSS 5.4 (medium): A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to…
• CVE-2021-1234 — CVSS 5.3 (medium): A vulnerability in the cluster management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker…
• CVE-2021-1486 — CVSS 5.3 (medium): A vulnerability in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to enumerate user accounts. This…
• CVE-2022-20830 — CVSS 5.3 (medium): A vulnerability in authentication mechanism of Cisco Software-Defined Application Visibility and Control (SD-AVC) on Cisco vManage could…
• CVE-2023-20262 — CVSS 5.3 (medium): A vulnerability in the SSH service of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to cause a process…
• CVE-2021-1464 — CVSS 5.0 (medium): A vulnerability in Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization checking and…
• CVE-2021-1470 — CVSS 4.9 (medium): A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker…
• CVE-2025-20216 — CVSS 4.7 (medium): A vulnerability in the web interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an unauthenticated…
• CVE-2022-20734 — CVSS 4.4 (medium): A vulnerability in Cisco SD-WAN vManage Software could allow an authenticated, local attacker to view sensitive information on an affected…
• CVE-2021-1233 — CVSS 4.4 (medium): A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to access sensitive information on an…
• CVE-2023-20098 — CVSS 4.4 (medium): A vulnerability in the CLI of Cisco SDWAN vManage Software could allow an authenticated, local attacker to delete arbitrary files. This…
• CVE-2021-1481 — CVSS 4.3 (medium): A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker…
• CVE-2020-3591 — CVSS 4.3 (medium): A vulnerability in the web-based management interface of the Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to…
• CVE-2021-1465 — CVSS 4.3 (medium): A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to…