Cisco product
Catalyst SD-WAN Manger
No CISA KEV deadline is open. CISA last added a Catalyst SD-WAN Manger CVE on 20 Apr.
Tracked since 5 Mar · latest article 21 Apr · RSS · API
0Open KEV deadlines
None open
0Added to KEV · 90 days
of 1 in the full CISA catalogue · all time
0High exploit odds · current
EPSS top 5%, not in KEV
0Articles · 7 days
none this week
Exploited, by due date1
Catalyst SD-WAN Manger CVEs in CISA KEV with their federal deadlines. None is open.
| CVE | Product | Added | Federal deadline | Articles |
|---|---|---|---|---|
| In CISA KEVCVE-2026-20122 | Catalyst SD-WAN Manger | 20 Apr | Passed 23 Apr | 8 |
Vendor CSV of 101 entries for CiscoAll 101 vendor entries, including other products.
Patch cadence and exploit odds
How often CISA adds Catalyst SD-WAN Manger CVEs, how many have a fix, and where their exploit odds sit.
Added to CISA KEV per quarter
Show as tableHide table
| Quarter | Added |
|---|---|
| Q1 2025 | 0 |
| Q2 2025 | 0 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 1 |
| Q3 2026 | 0 |
| Q4 2026 | 0 |
Fix listed
1 of 1 CVE in coverage
Every CVE in coverage has a fix recorded.
EPSS percentile of each CVE
One dot per CVE; a red diamond marks those in CISA KEV.
Show as tableHide table
| CVE | EPSS percentile |
|---|---|
| CVE-2026-20122 | 98 |
Coverage8 articles · all time
The latest 8 articles naming Catalyst SD-WAN Manger, in the shared story grammar.
Quiet for 27 weekslast report 21 Apr8 articles6 outlets
8 articles from 6 outlets since 5 Mar. Quiet since 21 Apr.
- Thu 5 Mar, 12:29 UTC. SecurityWeek, first report. Catalyst SD WAN flaws CVE-2026-20128 exploited, Cisco warns. Cites a CVE in CISA KEV.
- Thu 5 Mar, 16:41 UTC. The Hacker News, its first report on the story. Cisco warns CVE-2026-20122 and CVE-2026-20128 exploited in SD-WAN. Cites a CVE in CISA KEV.
- Fri 6 Mar, 10:58 UTC. SOCRadar, its first report on the story. Cisco Catalyst SD-WAN Manager (CVE-2026-20122 & CVE-2026-20128) Flaws Exploited. Cites a CVE in CISA KEV.
- Fri 6 Mar, 15:36 UTC. Security Affairs, its first report on the story. Cisco warns SDWAN flaws CVE-2026-20128 CVE-2026-20122. Cites a CVE in CISA KEV.
- Sun 8 Mar, 12:49 UTC. SecurityWeek. Cisco Catalyst SDWAN flaw CVE-2026-20127 fuels internet attacks. Cites a CVE in CISA KEV.
- Fri 13 Mar, 20:15 UTC. Dark Reading, its first report on the story. Fake PoCs, Misunderstood Risks Cause Cisco SD-WAN Chaos. Cites a CVE in CISA KEV.
- Tue 21 Apr, 00:21 UTC. CISA, its first report on the story. CISA Adds CVE-2026-20122 to Known Exploited Vulnerabilities Catalogue. Cites a CVE in CISA KEV.
- Tue 21 Apr, 07:32 UTC. The Hacker News. CISA adds eight KEV flaws, Cisco SDWAN bugs actively exploited. Cites a CVE in CISA KEV.
- Known exploited CVE
- No CVE
- Larger: an outlet’s first report
- Square: official source
- Coverage over time
- Quiet time, folded
Show all 8 articles as a listHide the list
- Thu 5 MarDay 02
- Catalyst SD WAN flaws CVE-2026-20128 exploited, Cisco warns12:29 · SecurityWeek · First report · Exploited CVE · Known exploited CVE
- Cisco warns CVE-2026-20122 and CVE-2026-20128 exploited in SD-WAN16:41 · The Hacker News · Known exploited CVE
- Fri 6 MarDay 12
- Cisco Catalyst SD-WAN Manager (CVE-2026-20122 & CVE-2026-20128) Flaws Exploited10:58 · SOCRadar · Known exploited CVE
Quiet for 2 days
Sun 8 MarDay 31- Cisco Catalyst SDWAN flaw CVE-2026-20127 fuels internet attacks12:49 · SecurityWeek · Known exploited CVE
Quiet for 5 days
Fri 13 MarDay 81- Fake PoCs, Misunderstood Risks Cause Cisco SD-WAN Chaos20:15 · Dark Reading · Picked up again · Known exploited CVE
Quiet for 5 weeks
Tue 21 AprDay 472- CISA Adds CVE-2026-20122 to Known Exploited Vulnerabilities Catalogue00:21 · CISA · official · CISA alert · Picked up again · Known exploited CVE
- CISA adds eight KEV flaws, Cisco SDWAN bugs actively exploited07:32 · The Hacker News · Known exploited CVE
All CVEs in coverage1
Exploited first, then by EPSS
- CVE-2026-20122Exploited
Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability
5.4Medium26% EPSS · 8 articles