Cisco Sd-wan Vbond Orchestrator — known CVE vulnerabilities

Every CVE whose affected-product data names Cisco Sd-wan Vbond Orchestrator, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (27)

• CVE-2026-20127 — CVSS 10.0 (critical) — actively exploited: A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager…
• CVE-2026-20182 — CVSS 10.0 (critical) — actively exploited: May 2026: This security advisory provides the details and fix information for a vulnerability that was discovered and fixed after the was…
• CVE-2021-1301 — CVSS 9.8 (critical): Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected…
• CVE-2021-1300 — CVSS 9.8 (critical): Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected…
• CVE-2021-1305 — CVSS 8.8 (high): Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote…
• CVE-2021-1298 — CVSS 8.8 (high): Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an…
• CVE-2021-1299 — CVSS 8.8 (high): Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an…
• CVE-2021-1241 — CVSS 8.6 (high): Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS)…
• CVE-2021-1279 — CVSS 8.6 (high): Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS)…
• CVE-2021-1278 — CVSS 8.6 (high): Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS)…
• CVE-2021-1273 — CVSS 8.6 (high): Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS)…
• CVE-2021-1274 — CVSS 8.6 (high): Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS)…
• CVE-2021-1262 — CVSS 7.8 (high): Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an…
• CVE-2021-1263 — CVSS 7.8 (high): Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an…
• CVE-2021-1528 — CVSS 7.8 (high): A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges on an affected…
• CVE-2022-20716 — CVSS 7.8 (high): A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain escalated privileges. This…
• CVE-2022-20775 — CVSS 7.8 (high) — actively exploited: A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. This…
• CVE-2022-20818 — CVSS 7.8 (high): Multiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges…
• CVE-2021-1260 — CVSS 7.8 (high): Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an…
• CVE-2021-1261 — CVSS 7.8 (high): Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an…
• CVE-2021-1514 — CVSS 7.8 (high): A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be…
• CVE-2021-1513 — CVSS 7.5 (high): A vulnerability in the vDaemon process of Cisco SD-WAN Software could allow an unauthenticated, remote attacker to cause a device to…
• CVE-2022-20930 — CVSS 6.7 (medium): A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite and possibly corrupt files on…
• CVE-2021-1512 — CVSS 6.0 (medium): A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in the…
• CVE-2022-20850 — CVSS 5.5 (medium): A vulnerability in the CLI of stand-alone Cisco IOS XE SD-WAN Software and Cisco SD-WAN Software could allow an authenticated, local…
• CVE-2021-1546 — CVSS 5.5 (medium): A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to access sensitive information. This…
• CVE-2021-1233 — CVSS 4.4 (medium): A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to access sensitive information on an…