File System Access Vulnerability in Cisco Catalyst SD-WAN Manager
CVE-2026-20133

6.5MEDIUM

Key Information:

Vendor

Cisco
Status
Cisco Catalyst Sd-wan Manager
Vendor
CVE Published:
25 February 2026

Badges

👾 Exploit Exists

What is CVE-2026-20133?

A vulnerability in Cisco Catalyst SD-WAN Manager allows an unauthenticated remote attacker to view sensitive information on the affected system. This issue arises from insufficient restrictions on file system access. By exploiting this vulnerability through the system's API, an attacker could successfully gain unauthorized access to sensitive information contained in the underlying operating system.

Affected Version(s)

Cisco Catalyst SD-WAN Manager 20.1.12

Cisco Catalyst SD-WAN Manager 19.2.1

Cisco Catalyst SD-WAN Manager 18.4.4

References

https://sec.cloudapps.cisco.com/security/center/content/C...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.