Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation Vulnerability
CVE-2026-20245

7.8HIGH

Key Information:

Vendor: Cisco
Status: Cisco Catalyst Sd-wan Manager
Vendor: CVE Published:; 4 June 2026

🔔 Create Cisco Vulnerability Alert

Badges

📈 Score: 594👾 Exploit Exists🟡 Public PoC📰 News Worthy

What is CVE-2026-20245?

false

Affected Version(s)

Cisco Catalyst SD-WAN Manager 20.1.12

Cisco Catalyst SD-WAN Manager 19.2.1

Cisco Catalyst SD-WAN Manager 18.4.4

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-20245
Created by HORKimhab

News Articles

The Hacker News

CVE-2026-20245

Cisco Catalyst SD-WAN Manager CVE-2026-20245 Flaw Actively Exploited – No Patch Available

Cisco Catalyst SD-WAN Manager vulnerability CVE-2026-20245 is under active exploitation and has a CVSS score of 7.8.

23 hours ago

It Security News

CVE-2026-20245

Cisco SD-WAN 0-day exploited, no patch available (CVE-2026-20245) - IT Security News

A 0-day privilege escalation vulnerability (CVE-2026-20245) in Cisco Catalyst SD-WAN Manager that has yet to be patched by Cisco is being leveraged by attackers. “To exploit this vulnerability, an attacker must have netadmin privileges on an affected system. This would…Read more →

2 days ago