Access Control Flaw in Cisco Catalyst SD-WAN Manager

CVE-2026-20294

What is CVE-2026-20294?

A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager allows authenticated remote attackers to access sensitive information in clear text. This flaw arises from insufficient enforcement of access controls on specific template types that are excluded from the encryption allowlist. Low-privileged attackers can exploit this issue by accessing logs stored either locally or on a remote logging server, potentially exposing sensitive authentication credentials. This breach could enable further compromises of network infrastructure and associated services.

References