Skip to main content

Catalyst SD-WAN vulnerabilities

1 published alerts for Cisco Catalyst SD-WAN.

Actively exploited (KEV)

CVE-2026-20182

Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

Cisco Catalyst SD-WAN is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-20182). Cisco Catalyst SD-WAN Controller & Manager contain an authentication bypass vulnerability that allows an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected system. CISA remediation due date: 2026-05-17. If you need help checking exposure, call (864) 335-9223.