File System Access Vulnerability in Cisco Catalyst SD-WAN Manager
CVE-2026-20133
6.5MEDIUM
What is CVE-2026-20133?
A vulnerability in Cisco Catalyst SD-WAN Manager allows an unauthenticated remote attacker to view sensitive information on the affected system. This issue arises from insufficient restrictions on file system access. By exploiting this vulnerability through the system's API, an attacker could successfully gain unauthorized access to sensitive information contained in the underlying operating system.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Cisco Catalyst SD-WAN Manager 20.1.12
Cisco Catalyst SD-WAN Manager 19.2.1
Cisco Catalyst SD-WAN Manager 18.4.4
References
CVSS V3.1
Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
- 👾
Exploit known to exist
Vulnerability published
Vulnerability Reserved