Privilege Escalation Vulnerability in Cisco Catalyst SD-WAN Manager

CVE-2026-20209

What is CVE-2026-20209?

A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager allows authenticated users with read-only permissions to escalate their privileges. This occurs due to sensitive session information being logged in audit records. An attacker could exploit this flaw to gain high-privileged access, potentially allowing them to perform actions normally restricted to legitimate high-privileged users, thereby posing significant risks to network integrity and security.

References