CVE-2026-20129

The vulnerability results from improper implementation of authentication for requests directed to the system's API. An attacker can exploit the flaw by sending a specially crafted request to the API of the vulnerable system. No prior privileges or user interaction are required — the attack can be conducted entirely remotely.

Successful exploitation of the vulnerability allows an attacker to execute commands with netadmin role privileges, providing the ability to modify network configuration, take control of SD-WAN infrastructure management, and potentially compromise the confidentiality, integrity, and availability of the system.

Update Cisco Catalyst SD-WAN Manager to version 20.18 or later. Detailed information about available patches and affected versions is available in the official Cisco security bulletin at the address indicated in the references.

Cisco Catalyst SD-WAN Manager in all versions prior to 20.18. Versions 20.18 and later are not vulnerable to this flaw.