Configuration Modification Vulnerability in Cisco Catalyst SD-WAN Manager

CVE-2026-20210

What is CVE-2026-20210?

A significant vulnerability has been identified in the web UI of Cisco Catalyst SD-WAN Manager, where an authenticated remote attacker with read-only permissions can manipulate configurations and execute unauthorized actions. The flaw arises from inadequate redaction of sensitive information within device configurations and templates. An attacker could leverage this weakness to escalate their permissions to those of a high-privileged user, potentially gaining access to sensitive configuration settings and other critical functionalities within the Cisco Catalyst SD-WAN Manager platform.

References