CYBERSIXT Signal Over Noise
All CVEs
Vulnerability intelligence

CVE-2026-20245

Cisco Catalyst SD-WAN Manager CWE-116

A vulnerability in the CLI of Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an authenticated, local attacker to execute arbitrary commands as root by supplying a crafted file to the affected system. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by uploading a crafted file to the affected system. A successful exploit could allow the attacker to perform command injection attacks on an affected system and elevate their privileges as the root user. To exploit this vulnerability, the attacker must have netadmin privileges on the affected system. This would require valid credentials or exploitation of or . Cisco is not aware of successful exploitation by other methods.

CVSS Score
7.8
High
EPSS — Exploit Probability
25%
Riskier than 98% of all CVEs
Exploitation
Confirmed in the wild
KEV since 2026-06-09
Remediation
Patch available
Federal deadline 2026-06-23
NVD entry Vendor patch PoC / advisory CISA KEV

17 articles across 9 outlets · first covered Jun 5, 2026 · latest Jun 26, 2026

Tracked incidents

vulnerability closed 10 articles
Cisco Catalyst SD-WAN zero‑day flaw (CVE-2026-20245) exploited months before patch

Coverage timeline

Related CVEs — Cisco

CVE-2026-20182KEV CVE-2026-20131KEV CVE-2026-20127KEV CVE-2025-20333KEV CVE-2025-20362KEV CVE-2026-20133KEV CVE-2026-20122KEV CVE-2026-20128KEV