6.5
Medium
CVE-2026-20294 A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow an authenticated,…
Description
A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. This vulnerability is due to insufficient access control enforcement for specific template types that are not included in the encryption allowlist. A low-privileged attacker could exploit this vulnerability by viewing logs on the local system or on a remote logging server. A successful exploit could allow the attacker to view sensitive authentication credentials, which could lead to further compromise of network infrastructure and connected services.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Catalyst SD-WAN Manager 26.1 | 26.1.1 → 26.1.1.2 | No fix stated |
| Cisco Catalyst SD-WAN Manager | 26.0.1 | No fix stated |
| Cisco Catalyst SD-WAN Manager 20.18 | 20.18.1 → 20.18.3.1 | No fix stated |
| Cisco Catalyst SD-WAN Manager | 20.16.1 | No fix stated |
| Cisco Catalyst SD-WAN Manager 20.15 | 20.15.1 → 20.15.5.3 | No fix stated |
| Cisco Catalyst SD-WAN Manager | 20.14.1 | No fix stated |
| Cisco Catalyst SD-WAN Manager | 20.13.1 | No fix stated |
| Cisco Catalyst SD-WAN Manager 20.12 | 20.12.1 → 20.12.501 | No fix stated |
| Cisco Catalyst SD-WAN Manager 20.11 | 20.11.1 → 20.11.1.2 | No fix stated |
Show the 17 other branches Hide the 17 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Catalyst SD-WAN Manager 20.10 | 20.10.1 → 20.10.1.2 | No fix stated |
| Cisco Catalyst SD-WAN Manager 20.9 | 20.9.1EFT2 → 20.9.9.2 | No fix stated |
| Cisco Catalyst SD-WAN Manager | 20.8.1 | No fix stated |
| Cisco Catalyst SD-WAN Manager 20.7 | 20.7.1EFT2 → 20.7.2 | No fix stated |
| Cisco Catalyst SD-WAN Manager 20.6 | 20.6.0.18.3 → 20.6.8 | No fix stated |
| Cisco Catalyst SD-WAN Manager 20.5 | 20.5.0.1.1 → 20.5.1.2 | No fix stated |
| Cisco Catalyst SD-WAN Manager 20.4 | 20.4.1 → 20.4.2.3 | No fix stated |
| Cisco Catalyst SD-WAN Manager 20.3 | 20.3.1 → 20.3.814 | No fix stated |
| Cisco Catalyst SD-WAN Manager 20.1 | 20.1.1 → 20.1.12 | No fix stated |
| Cisco Catalyst SD-WAN Manager | 19.3.0 | No fix stated |
| Cisco Catalyst SD-WAN Manager 19.2 | 19.2.0 → 19.2.929 | No fix stated |
| Cisco Catalyst SD-WAN Manager | 19.1.0 | No fix stated |
| Cisco Catalyst SD-WAN Manager 19.0 | 19.0.0 → 19.0.1a | No fix stated |
| Cisco Catalyst SD-WAN Manager 18.4 | 18.4.0 → 18.4.303 | No fix stated |
| Cisco Catalyst SD-WAN Manager 18.3 | 18.3.0 → 18.3.8 | No fix stated |
| Cisco Catalyst SD-WAN Manager | 18.2.0 | No fix stated |
| Cisco Catalyst SD-WAN Manager 17.2 | 17.2.4 → 17.2.10 | No fix stated |
References
- cisco-sa-sdwan-infodis-SPuJBDCe sec.cloudapps.cisco.com
Timeline
- Published
- Last modified
Other CVEs of Cisco Catalyst SD-WAN Manager
The 46 CVEs of Cisco Catalyst SD-WAN Manager →
CVE-2026-76504
Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
9.8
Critical
CVE-2026-20313
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering…
7.7
High
CVE-2026-20312
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering…
8.8
High
CVE-2026-20310
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering…
9.1
Critical