API Vulnerability in Cisco Catalyst SD-WAN Manager Allows File Overwrite

CVE-2026-20122

What is CVE-2026-20122?

A vulnerability in the API of Cisco Catalyst SD-WAN Manager permits authenticated remote attackers to overwrite arbitrary files on the local file system. This issue arises from improper file handling within the API interface, allowing an attacker with valid read-only credentials and API access to exploit the system. By uploading a malicious file, attackers can potentially overwrite crucial files, leading to unauthorized privilege escalation for the vManage user.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References