Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-20182— Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

Quick assessment

Affected
Cisco Cisco Catalyst SD-WAN Controller
Exploitation
Confirmed exploitation in the wild; remediate immediately
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Cisco Catalyst SD-WAN Manager（Cisco SD-WAN vManage）和Cisco Catalyst SD-WAN Controller都是美国思科（Cisco）公司的产品。Cisco Catalyst SD-WAN Manager是一个高度可定制的仪表板。可简化和自动化 Cisco SD-WAN 的部署、配置、管理和操作。Cisco Catalyst SD-WAN Controller是一个安全策略控制面板。 Cisco Catalyst SD-WAN Manager（C

CVSS 10.0 · Critical KEV EPSS 91.52% · P100

Public Exploits 1

Metasploit · 1 cisco_sdwan_vhub_auth_bypass.rb [auxiliary]

Affected Version Matrix 163

VendorProduct Version RangeStatus
Cisco Cisco Catalyst SD-WAN Controller 20.6.4 affected
20.9.2 affected
20.3.6 affected
20.7.2 affected
20.7.1 affected
20.5.1 affected
20.6.2 affected
19.3.0 affected
… +121 more rows
Cisco Cisco Catalyst SD-WAN Manager 20.1.12 affected
19.2.1 affected
18.4.4 affected
18.4.5 affected
20.1.1.1 affected
20.1.1 affected
19.2.099 affected
18.3.6 affected
… +26 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-20182

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
May 2026: This security advisory provides the details and fix information for a vulnerability that was discovered and fixed after the was disclosed in February 2026. This new advisory is for a new vulnerability in the control connection handshaking. The section of this advisory includes Show Control Connections guidance to help with system checks.  A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected system. This vulnerability exists because the peering authentication mechanism in an affected system is not working properly. An attacker could exploit this vulnerability by sending crafted requests to the affected system. A successful exploit could allow the attacker to log in to an affected Cisco Catalyst SD-WAN Controller as an internal, high-privileged, non-root user account. Using this account, the attacker could access NETCONF, which would then allow the attacker to manipulate network configuration for the SD-WAN fabric.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
认证机制不恰当
Source: CVE Program / CVE List V5
Vulnerability Title
Cisco Catalyst SD-WAN Manager和Cisco Catalyst SD-WAN Controller 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco Catalyst SD-WAN Manager（Cisco SD-WAN vManage）和Cisco Catalyst SD-WAN Controller都是美国思科（Cisco）公司的产品。Cisco Catalyst SD-WAN Manager是一个高度可定制的仪表板。可简化和自动化 Cisco SD-WAN 的部署、配置、管理和操作。Cisco Catalyst SD-WAN Controller是一个安全策略控制面板。 Cisco Catalyst SD-WAN Manager（C
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Cisco Cisco Catalyst SD-WAN Controller 20.6.4 -
Cisco Cisco Catalyst SD-WAN Manager 20.1.12 -

II. Public POCs for CVE-2026-20182

# POC Description Source Link Shenlong Link
1 Cisco Catalyst SD-WAN Controller and Manager contain an authentication bypass caused by improper peering authentication mechanism, letting unauthenticated remote attackers obtain administrative privileges, exploit requires sending crafted requests. https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2026/CVE-2026-20182.yaml POC Details
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-20182

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-20182 (2)

Same Patch Batch · Cisco · 2026-05-14 · 4 CVEs total

CVE-2026-20224 8.6 HIGH Cisco Catalyst SD-WAN Manager XML External Entity Injection Vulnerability
CVE-2026-20209 5.4 MEDIUM Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability
CVE-2026-20210 5.4 MEDIUM Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability

IV. Related Vulnerabilities

Same product: Cisco Catalyst SD-WAN Controller
Same vendor: Cisco
Same weakness: CWE-287

V. Comments for CVE-2026-20182

No comments yet

Leave a comment