Evidence dossier

CVE-2026-20127

Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

Exploited in the wild (CISA KEV since Feb 25, 2026). NVD reports CVSS 3.1 10.0. EPSS estimates 88.2% exploit likelihood as of Aug 26, 2026.

87.9–89.1Priority evidence range

Evidence current through Aug 27, 2026, 6:09 PM UTC

As of Aug 27, 2026

Normalized restatement

A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected system. This vulnerability exists because the peering authentication mechanism in an affected system is not working properly. An attacker could exploit this vulnerability by sending crafted requests to an affected system. A successful exploit could allow the attacker to log in to an affected Cisco Catalyst SD-WAN Controller as an internal, high-privileged, non-root user account. Using this account, the attacker could access NETCONF, which would then allow the attacker to manipulate network configuration for the SD-WAN fabric. 

State: PUBLISHED
Published: Feb 25, 2026
Updated: Jun 16, 2026
Evidence coverage: 99%

Evidence chronology

What was known when

Download this view's receipt →

Source dateSource date omittedFirst observed by CASCAJul 19, 2026
CISA-ADP
Record text: CISA ADP Vulnrichment
Inspect raw assertion
Field
container
Value
CISA ADP Vulnrichment
Original evidence ↗
Source dateSource date omittedFirst observed by CASCAJul 19, 2026
cisco
Record text: Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
Inspect raw assertion
Field
container
Value
Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
Original evidence ↗
Source dateJul 16, 2026First observed by CASCAJul 19, 2026
CISA KEV
Exploitation cataloged: Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability
Inspect raw assertion
Field
observed_exploitation
Value
Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability
Original evidence ↗
Source dateAug 26, 2026First observed by CASCAAug 26, 2026
FIRST EPSS
EPSS score: 88.24% probability · 99.76th percentile
Inspect raw assertion
Field
model_probability
Value
Probability 0.882430000000; percentile 0.997560000000
Original evidence ↗

ExploitationCatalog member

CISA KEV · catalog date Feb 25, 2026 · first observed Jul 19, 2026

Exploit likelihood88.24%

FIRST EPSS · score date Aug 26, 2026 · 99.8th percentile · first observed Aug 26, 2026

SeverityCVSS 10.0

NVD · CVSS 3.1 · first observed Jul 19, 2026 · same-version scores align in this snapshot

Evidence detail

Source limits and decisions

Why each evidence state has this value

casca-unknown-reasons-v1

Exploitation statusEvidence supported

Eligible evidence is present for this bounded claim.

Revision: evidence-policy-v1.1.0
Cutoff: Aug 27, 2026
Resolution: None

Exploit likelihoodEvidence supported

Eligible evidence is present for this bounded claim.

Revision: evidence-policy-v1.1.0
Cutoff: Aug 27, 2026
Resolution: None

Severity assessmentEvidence supported

Eligible evidence is present for this bounded claim.

Revision: casca-direct-cvss-eligibility-v1
Cutoff: Aug 27, 2026
Resolution: None

Affected productsSource-reported scope

The cited source assertion is retained while canonical product linkage remains open.

Revision: casca-factor-d-obligations-v1
Cutoff: Aug 27, 2026
Resolution: Resolve identity

Source comparison

Who said what

CISA-ADPIndependent enrichment

Record text

CISA ADP Vulnrichment

Inspect raw assertion

Field: container
Value: CISA ADP Vulnrichment

Source dateSource date omittedFirst observed by CASCAJul 19, 2026Original evidence ↗

ciscoOriginal assertion

Record text

Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

Inspect raw assertion

Field: container
Value: Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

Source dateSource date omittedFirst observed by CASCAJul 19, 2026Original evidence ↗

CISA KEVOriginal assertion

Exploitation cataloged

Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability

Inspect raw assertion

Field: observed_exploitation
Value: Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability

Source dateJul 16, 2026First observed by CASCAJul 19, 2026Original evidence ↗

FIRST EPSSOriginal assertion

EPSS score

88.24% probability · 99.76th percentile

Inspect raw assertion

Field: model_probability
Value: Probability 0.882430000000; percentile 0.997560000000

Source dateAug 26, 2026First observed by CASCAAug 26, 2026Original evidence ↗

Applicability

Cited product scope

Trace impact →

15Underlying assertions

3Canonical products

15Target assertions

0Constraint assertions

Grouped from 1 configuration nodes in this exact snapshot. Visual grouping is navigational; asset exposure and root cause require cited evidence.

Identity source boundaries

Cpe dictionary1,775,266 records · observed through 2026-07-21T06:45:29.809Z27d65b0f-b718-4b4f-bb79-c47c68d09dfa
Cpe match643,502 records · observed through 2026-07-21T08:13:17.697Z955dae73-7302-438b-aee1-058d7cc5d48e

Search scopeRoleOfficial link state

4 scope groups

cisco · source assertedCiscoCisco Catalyst SD-WAN ManagerDirect source scope

Affected: 20.1.12Affected: 19.2.1Affected: 18.4.4Affected: 18.4.5Affected: 20.1.1.1Affected: 20.1.1Affected: 19.3.0Affected: 19.2.2Affected: 19.2.099Affected: 18.3.6Affected: 18.3.7Affected: 19.2.0Affected: 18.3.8Affected: 19.0.0Affected: 19.1.0Affected: 18.4.302Affected: 18.4.303Affected: 19.2.097Affected: 19.2.098Affected: 17.2.10Affected: 18.3.6.1Affected: 19.0.1aAffected: 18.2.0Affected: 18.4.3Affected: 18.4.1Affected: 17.2.8Affected: 18.3.3.1Affected: 18.4.0Affected: 18.3.1Affected: 17.2.6Affected: 17.2.9Affected: 18.3.4Affected: 17.2.5Affected: 18.3.1.1Affected: 18.3.5Affected: 18.4.0.1Affected: 18.3.3Affected: 17.2.7Affected: 17.2.4Affected: 18.3.0Affected: 19.2.3Affected: 18.4.501_ESAffected: 20.3.1Affected: 20.1.2Affected: 19.2.929Affected: 19.2.31Affected: 20.3.2Affected: 19.2.32Affected: 20.3.2_925Affected: 20.3.2.1Affected: 20.3.2.1_927Affected: 18.4.6Affected: 20.1.2_937Affected: 20.4.1Affected: 20.3.2_928Affected: 20.3.2_929Affected: 20.4.1.0.1Affected: 20.3.2.1_930Affected: 19.2.4Affected: 20.5.0.1.1Affected: 20.4.1.1Affected: 20.3.3Affected: 19.2.4.0.1Affected: 20.3.2_937Affected: 20.3.3.1Affected: 20.5.1Affected: 20.1.3Affected: 20.3.3.0.4Affected: 20.3.3.1.2Affected: 20.3.3.1.1Affected: 20.4.1.2Affected: 20.3.3.0.2Affected: 20.4.1.1.5Affected: 20.4.1.0.01Affected: 20.4.1.0.02Affected: 20.3.3.1.7Affected: 20.3.3.1.5Affected: 20.5.1.0.1Affected: 20.3.3.1.10Affected: 20.3.3.0.8Affected: 20.4.2Affected: 20.4.2.0.1Affected: 20.3.4Affected: 20.3.3.0.14Affected: 19.2.4.0.8Affected: 19.2.4.0.9Affected: 20.3.4.0.1Affected: 20.3.2.0.5Affected: 20.6.1Affected: 20.5.1.0.2Affected: 20.3.3.0.17Affected: 20.6.1.1Affected: 20.6.0.18.3Affected: 20.3.2.0.6Affected: 20.6.0.18.4Affected: 20.4.2.0.2Affected: 20.3.3.0.16Affected: 20.3.4.0.5Affected: 20.6.1.0.1Affected: 20.3.4.0.6Affected: 20.6.2Affected: 20.7.1EFT2Affected: 20.3.4.0.9Affected: 20.3.4.0.11Affected: 20.4.2.0.4Affected: 20.3.3.0.18Affected: 20.7.1Affected: 20.6.2.1Affected: 20.3.4.1Affected: 20.5.1.1Affected: 20.4.2.1Affected: 20.4.2.1.1Affected: 20.3.4.1.1Affected: 20.3.813Affected: 20.3.4.0.19Affected: 20.4.2.2.1Affected: 20.5.1.2Affected: 20.3.4.2Affected: 20.3.814Affected: 20.4.2.2Affected: 20.6.2.2Affected: 20.3.4.2.1Affected: 20.7.1.1Affected: 20.3.4.1.2Affected: 20.6.2.2.2Affected: 20.3.4.0.20Affected: 20.6.2.2.3Affected: 20.4.2.2.2Affected: 20.3.5Affected: 20.6.2.0.4Affected: 20.4.2.2.3Affected: 20.3.4.0.24Affected: 20.6.2.2.7Affected: 20.6.3Affected: 20.3.4.2.2Affected: 20.4.2.2.4Affected: 20.7.1.0.2Affected: 20.8.1Affected: 20.3.5.0.8Affected: 20.3.5.0.9Affected: 20.4.2.2.8Affected: 20.3.5.0.7Affected: 20.6.3.0.7Affected: 20.6.3.0.5Affected: 20.6.3.0.10Affected: 20.6.3.0.2Affected: 20.7.2Affected: 20.9.1EFT2Affected: 20.6.3.0.11Affected: 20.6.3.1Affected: 20.6.3.0.14Affected: 20.6.4Affected: 20.9.1Affected: 20.6.3.0.19Affected: 20.6.3.0.18Affected: 20.3.6Affected: 20.9.1.1Affected: 20.6.3.0.23Affected: 20.6.4.0.4Affected: 20.6.3.0.25Affected: 20.6.5Affected: 20.6.3.0.27Affected: 20.9.2Affected: 20.9.2.1Affected: 20.6.3.0.29Affected: 20.6.3.0.31Affected: 20.6.3.0.32Affected: 20.10.1Affected: 20.6.3.0.33Affected: 20.9.2.0.01Affected: 20.9.1_LI_ImagesAffected: 20.10.1_LI_ImagesAffected: 20.9.2_LI_ImagesAffected: 20.3.7Affected: 20.9.3Affected: 20.6.5.1Affected: 20.11.1Affected: 20.11.1_LI_ImagesAffected: 20.9.3_LI_ ImagesAffected: 20.6.3.1.1Affected: 20.9.3.0.2Affected: 20.6.5.1.2Affected: 20.9.3.0.3Affected: 20.4.2.3Affected: 20.6.3.2Affected: 20.6.4.1Affected: 20.6.3.0.38Affected: 20.6.3.0.39Affected: 20.3.5.1Affected: 20.3.4.3Affected: 20.9.3.1Affected: 20.3.3.2Affected: 20.6.5.2Affected: 20.3.7.1Affected: 20.10.1.1Affected: 20.6.5.2.1Affected: 20.3.4.0.25Affected: 20.6.2.2.4Affected: 20.6.1.2Affected: 20.11.1.1Affected: 20.9.3.0.5Affected: 20.3.4.0.26Affected: 20.6.5.1.3Affected: 20.6.3.0.40Affected: 20.1.3.1Affected: 20.9.2.2Affected: 20.6.5.2.3Affected: 20.6.5.1.4Affected: 20.6.5.3Affected: 20.6.3.0.41Affected: 20.9.3.0.7Affected: 20.6.5.1.5Affected: 20.9.3.0.4Affected: 20.6.4.0.19Affected: 20.6.5.1.6Affected: 20.9.3.0.8Affected: 20.6.3.3Affected: 20.3.7.2Affected: 20.6.5.4Affected: 20.6.5.1.7Affected: 20.9.3.0.12Affected: 20.6.4.2Affected: 20.6.5.5Affected: 20.9.3.2Affected: 20.11.1.2Affected: 20.6.3.4Affected: 20.10.1.2Affected: 20.6.5.1.9Affected: 20.9.3.0.16Affected: 20.6.3.0.45Affected: 20.6.5.1.10Affected: 20.9.3.0.17Affected: 20.6.5.2.4Affected: 20.6.4.0.21Affected: 20.9.3.0.18Affected: 20.6.3.0.46Affected: 20.6.3.0.47Affected: 20.9.2.3Affected: 20.9.3.2_LI_ImagesAffected: 20.9.3.0.21Affected: 20.9.3.0.20Affected: 20.9.4_LI_ImagesAffected: 20.9.4Affected: 20.6.5.1.11Affected: 20.12.1Affected: 20.12.1_LI_ImagesAffected: 20.6.5.1.13Affected: 20.9.3.0.23Affected: 20.6.5.2.8Affected: 20.9.4.1Affected: 20.9.4.1_LI_ImagesAffected: 20.9.3.0.25Affected: 20.9.3.0.24Affected: 20.6.5.1.14Affected: 20.3.8Affected: 20.6.6Affected: 20.9.3.0.26Affected: 20.6.3.0.51Affected: 20.9.3.0.29Affected: 20.12.2Affected: 20.12.2_LI_ImagesAffected: 20.6.6.0.1Affected: 20.13.1_LI_ImagesAffected: 20.9.4.0.4Affected: 20.13.1Affected: 20.9.4.1.1Affected: 20.9.5Affected: 20.9.5_LI_ImagesAffected: 20.12.3_LI_ImagesAffected: 20.12.3Affected: 20.9.4.1.3Affected: 20.6.7Affected: 20.9.5.1Affected: 20.9.5.1_LI_ImagesAffected: 20.9.4.1.6Affected: 20.14.1Affected: 20.14.1_LI_ImagesAffected: 20.9.5.2Affected: 20.9.5.2.1Affected: 20.9.5.2_LI_ImagesAffected: 20.12.3.1Affected: 20.12.4Affected: 20.15.1_LI_ImagesAffected: 20.15.1Affected: 20.9.5.1.4Affected: 20.9.5.2.7Affected: 20.9.5.2.13Affected: 20.9.6Affected: 20.9.6_LI_ImagesAffected: 20.9.5.2.14Affected: 20.6.8Affected: 20.12.4.0.03Affected: 20.16.1Affected: 20.16.1_LI_ImagesAffected: 20.12.4_LI_ImagesAffected: 20.9.5.2.16Affected: 20.12.4.0.4Affected: 20.12.401Affected: 20.9.5.3Affected: 20.9.5.3_LI_ImagesAffected: 20.12.4.1_LI_ImagesAffected: 20.12.4.1Affected: 20.9.5.2.21Affected: 20.9.6.0.3Affected: 20.12.4.0.6Affected: 20.15.2_LI_ImagesAffected: 20.15.2Affected: 20.12.4_Monthly_ES5Affected: 20.12.5Affected: 20.12.5_LI_ImagesAffected: 20.9.7_LI _ImagesAffected: 20.9.7Affected: 20.15.3Affected: 20.15.3_ LI _ImagesAffected: 20.12.501Affected: 20.12.5.1_LI_ImagesAffected: 20.12.5.1Affected: 20.12.5.2_LI_ImagesAffected: 20.12.5.2Affected: 20.15.3.1Affected: 20.15.4_LI_ImagesAffected: 20.15.4Affected: 20.9.7.1_LI _ImagesAffected: 20.9.7.1Affected: 20.18.1Affected: 20.18.1_LI_ImagesAffected: 20.12.6_LI_ImagesAffected: 20.12.6Affected: 20.12.5.1.01Affected: 20.9.8Affected: 20.9.8_LI_ImagesAffected: 20.18.2Affected: 20.15.4.1_LI_ImagesAffected: 20.15.4.1Affected: 20.18.2_LI_Images

Source-reported scope

Canonical linkage remains open; the cited source assertion is retained below.

Inspect raw assertion

[{"status": "affected", "version": "20.1.12"}, {"status": "affected", "version": "19.2.1"}, {"status": "affected", "version": "18.4.4"}, {"status": "affected", "version": "18.4.5"}, {"status": "affected", "version": "20.1.1.1"}, {"status": "affected", "version": "20.1.1"}, {"status": "affected", "version": "19.3.0"}, {"status": "affected", "version": "19.2.2"}, {"status": "affected", "version": "19.2.099"}, {"status": "affected", "version": "18.3.6"}, {"status": "affected", "version": "18.3.7"}, {"status": "affected", "version": "19.2.0"}, {"status": "affected", "version": "18.3.8"}, {"status": "affected", "version": "19.0.0"}, {"status": "affected", "version": "19.1.0"}, {"status": "affected", "version": "18.4.302"}, {"status": "affected", "version": "18.4.303"}, {"status": "affected", "version": "19.2.097"}, {"status": "affected", "version": "19.2.098"}, {"status": "affected", "version": "17.2.10"}, {"status": "affected", "version": "18.3.6.1"}, {"status": "affected", "version": "19.0.1a"}, {"status": "affected", "version": "18.2.0"}, {"status": "affected", "version": "18.4.3"}, {"status": "affected", "version": "18.4.1"}, {"status": "affected", "version": "17.2.8"}, {"status": "affected", "version": "18.3.3.1"}, {"status": "affected", "version": "18.4.0"}, {"status": "affected", "version": "18.3.1"}, {"status": "affected", "version": "17.2.6"}, {"status": "affected", "version": "17.2.9"}, {"status": "affected", "version": "18.3.4"}, {"status": "affected", "version": "17.2.5"}, {"status": "affected", "version": "18.3.1.1"}, {"status": "affected", "version": "18.3.5"}, {"status": "affected", "version": "18.4.0.1"}, {"status": "affected", "version": "18.3.3"}, {"status": "affected", "version": "17.2.7"}, {"status": "affected", "version": "17.2.4"}, {"status": "affected", "version": "18.3.0"}, {"status": "affected", "version": "19.2.3"}, {"status": "affected", "version": "18.4.501_ES"}, {"status": "affected", "version": "20.3.1"}, {"status": "affected", "version": "20.1.2"}, {"status": "affected", "version": "19.2.929"}, {"status": "affected", "version": "19.2.31"}, {"status": "affected", "version": "20.3.2"}, {"status": "affected", "version": "19.2.32"}, {"status": "affected", "version": "20.3.2_925"}, {"status": "affected", "version": "20.3.2.1"}, {"status": "affected", "version": "20.3.2.1_927"}, {"status": "affected", "version": "18.4.6"}, {"status": "affected", "version": "20.1.2_937"}, {"status": "affected", "version": "20.4.1"}, {"status": "affected", "version": "20.3.2_928"}, {"status": "affected", "version": "20.3.2_929"}, {"status": "affected", "version": "20.4.1.0.1"}, {"status": "affected", "version": "20.3.2.1_930"}, {"status": "affected", "version": "19.2.4"}, {"status": "affected", "version": "20.5.0.1.1"}, {"status": "affected", "version": "20.4.1.1"}, {"status": "affected", "version": "20.3.3"}, {"status": "affected", "version": "19.2.4.0.1"}, {"status": "affected", "version": "20.3.2_937"}, {"status": "affected", "version": "20.3.3.1"}, {"status": "affected", "version": "20.5.1"}, {"status": "affected", "version": "20.1.3"}, {"status": "affected", "version": "20.3.3.0.4"}, {"status": "affected", "version": "20.3.3.1.2"}, {"status": "affected", "version": "20.3.3.1.1"}, {"status": "affected", "version": "20.4.1.2"}, {"status": "affected", "version": "20.3.3.0.2"}, {"status": "affected", "version": "20.4.1.1.5"}, {"status": "affected", "version": "20.4.1.0.01"}, {"status": "affected", "version": "20.4.1.0.02"}, {"status": "affected", "version": "20.3.3.1.7"}, {"status": "affected", "version": "20.3.3.1.5"}, {"status": "affected", "version": "20.5.1.0.1"}, {"status": "affected", "version": "20.3.3.1.10"}, {"status": "affected", "version": "20.3.3.0.8"}, {"status": "affected", "version": "20.4.2"}, {"status": "affected", "version": "20.4.2.0.1"}, {"status": "affected", "version": "20.3.4"}, {"status": "affected", "version": "20.3.3.0.14"}, {"status": "affected", "version": "19.2.4.0.8"}, {"status": "affected", "version": "19.2.4.0.9"}, {"status": "affected", "version": "20.3.4.0.1"}, {"status": "affected", "version": "20.3.2.0.5"}, {"status": "affected", "version": "20.6.1"}, {"status": "affected", "version": "20.5.1.0.2"}, {"status": "affected", "version": "20.3.3.0.17"}, {"status": "affected", "version": "20.6.1.1"}, {"status": "affected", "version": "20.6.0.18.3"}, {"status": "affected", "version": "20.3.2.0.6"}, {"status": "affected", "version": "20.6.0.18.4"}, {"status": "affected", "version": "20.4.2.0.2"}, {"status": "affected", "version": "20.3.3.0.16"}, {"status": "affected", "version": "20.3.4.0.5"}, {"status": "affected", "version": "20.6.1.0.1"}, {"status": "affected", "version": "20.3.4.0.6"}, {"status": "affected", "version": "20.6.2"}, {"status": "affected", "version": "20.7.1EFT2"}, {"status": "affected", "version": "20.3.4.0.9"}, {"status": "affected", "version": "20.3.4.0.11"}, {"status": "affected", "version": "20.4.2.0.4"}, {"status": "affected", "version": "20.3.3.0.18"}, {"status": "affected", "version": "20.7.1"}, {"status": "affected", "version": "20.6.2.1"}, {"status": "affected", "version": "20.3.4.1"}, {"status": "affected", "version": "20.5.1.1"}, {"status": "affected", "version": "20.4.2.1"}, {"status": "affected", "version": "20.4.2.1.1"}, {"status": "affected", "version": "20.3.4.1.1"}, {"status": "affected", "version": "20.3.813"}, {"status": "affected", "version": "20.3.4.0.19"}, {"status": "affected", "version": "20.4.2.2.1"}, {"status": "affected", "version": "20.5.1.2"}, {"status": "affected", "version": "20.3.4.2"}, {"status": "affected", "version": "20.3.814"}, {"status": "affected", "version": "20.4.2.2"}, {"status": "affected", "version": "20.6.2.2"}, {"status": "affected", "version": "20.3.4.2.1"}, {"status": "affected", "version": "20.7.1.1"}, {"status": "affected", "version": "20.3.4.1.2"}, {"status": "affected", "version": "20.6.2.2.2"}, {"status": "affected", "version": "20.3.4.0.20"}, {"status": "affected", "version": "20.6.2.2.3"}, {"status": "affected", "version": "20.4.2.2.2"}, {"status": "affected", "version": "20.3.5"}, {"status": "affected", "version": "20.6.2.0.4"}, {"status": "affected", "version": "20.4.2.2.3"}, {"status": "affected", "version": "20.3.4.0.24"}, {"status": "affected", "version": "20.6.2.2.7"}, {"status": "affected", "version": "20.6.3"}, {"status": "affected", "version": "20.3.4.2.2"}, {"status": "affected", "version": "20.4.2.2.4"}, {"status": "affected", "version": "20.7.1.0.2"}, {"status": "affected", "version": "20.8.1"}, {"status": "affected", "version": "20.3.5.0.8"}, {"status": "affected", "version": "20.3.5.0.9"}, {"status": "affected", "version": "20.4.2.2.8"}, {"status": "affected", "version": "20.3.5.0.7"}, {"status": "affected", "version": "20.6.3.0.7"}, {"status": "affected", "version": "20.6.3.0.5"}, {"status": "affected", "version": "20.6.3.0.10"}, {"status": "affected", "version": "20.6.3.0.2"}, {"status": "affected", "version": "20.7.2"}, {"status": "affected", "version": "20.9.1EFT2"}, {"status": "affected", "version": "20.6.3.0.11"}, {"status": "affected", "version": "20.6.3.1"}, {"status": "affected", "version": "20.6.3.0.14"}, {"status": "affected", "version": "20.6.4"}, {"status": "affected", "version": "20.9.1"}, {"status": "affected", "version": "20.6.3.0.19"}, {"status": "affected", "version": "20.6.3.0.18"}, {"status": "affected", "version": "20.3.6"}, {"status": "affected", "version": "20.9.1.1"}, {"status": "affected", "version": "20.6.3.0.23"}, {"status": "affected", "version": "20.6.4.0.4"}, {"status": "affected", "version": "20.6.3.0.25"}, {"status": "affected", "version": "20.6.5"}, {"status": "affected", "version": "20.6.3.0.27"}, {"status": "affected", "version": "20.9.2"}, {"status": "affected", "version": "20.9.2.1"}, {"status": "affected", "version": "20.6.3.0.29"}, {"status": "affected", "version": "20.6.3.0.31"}, {"status": "affected", "version": "20.6.3.0.32"}, {"status": "affected", "version": "20.10.1"}, {"status": "affected", "version": "20.6.3.0.33"}, {"status": "affected", "version": "20.9.2.0.01"}, {"status": "affected", "version": "20.9.1_LI_Images"}, {"status": "affected", "version": "20.10.1_LI_Images"}, {"status": "affected", "version": "20.9.2_LI_Images"}, {"status": "affected", "version": "20.3.7"}, {"status": "affected", "version": "20.9.3"}, {"status": "affected", "version": "20.6.5.1"}, {"status": "affected", "version": "20.11.1"}, {"status": "affected", "version": "20.11.1_LI_Images"}, {"status": "affected", "version": "20.9.3_LI_ Images"}, {"status": "affected", "version": "20.6.3.1.1"}, {"status": "affected", "version": "20.9.3.0.2"}, {"status": "affected", "version": "20.6.5.1.2"}, {"status": "affected", "version": "20.9.3.0.3"}, {"status": "affected", "version": "20.4.2.3"}, {"status": "affected", "version": "20.6.3.2"}, {"status": "affected", "version": "20.6.4.1"}, {"status": "affected", "version": "20.6.3.0.38"}, {"status": "affected", "version": "20.6.3.0.39"}, {"status": "affected", "version": "20.3.5.1"}, {"status": "affected", "version": "20.3.4.3"}, {"status": "affected", "version": "20.9.3.1"}, {"status": "affected", "version": "20.3.3.2"}, {"status": "affected", "version": "20.6.5.2"}, {"status": "affected", "version": "20.3.7.1"}, {"status": "affected", "version": "20.10.1.1"}, {"status": "affected", "version": "20.6.5.2.1"}, {"status": "affected", "version": "20.3.4.0.25"}, {"status": "affected", "version": "20.6.2.2.4"}, {"status": "affected", "version": "20.6.1.2"}, {"status": "affected", "version": "20.11.1.1"}, {"status": "affected", "version": "20.9.3.0.5"}, {"status": "affected", "version": "20.3.4.0.26"}, {"status": "affected", "version": "20.6.5.1.3"}, {"status": "affected", "version": "20.6.3.0.40"}, {"status": "affected", "version": "20.1.3.1"}, {"status": "affected", "version": "20.9.2.2"}, {"status": "affected", "version": "20.6.5.2.3"}, {"status": "affected", "version": "20.6.5.1.4"}, {"status": "affected", "version": "20.6.5.3"}, {"status": "affected", "version": "20.6.3.0.41"}, {"status": "affected", "version": "20.9.3.0.7"}, {"status": "affected", "version": "20.6.5.1.5"}, {"status": "affected", "version": "20.9.3.0.4"}, {"status": "affected", "version": "20.6.4.0.19"}, {"status": "affected", "version": "20.6.5.1.6"}, {"status": "affected", "version": "20.9.3.0.8"}, {"status": "affected", "version": "20.6.3.3"}, {"status": "affected", "version": "20.3.7.2"}, {"status": "affected", "version": "20.6.5.4"}, {"status": "affected", "version": "20.6.5.1.7"}, {"status": "affected", "version": "20.9.3.0.12"}, {"status": "affected", "version": "20.6.4.2"}, {"status": "affected", "version": "20.6.5.5"}, {"status": "affected", "version": "20.9.3.2"}, {"status": "affected", "version": "20.11.1.2"}, {"status": "affected", "version": "20.6.3.4"}, {"status": "affected", "version": "20.10.1.2"}, {"status": "affected", "version": "20.6.5.1.9"}, {"status": "affected", "version": "20.9.3.0.16"}, {"status": "affected", "version": "20.6.3.0.45"}, {"status": "affected", "version": "20.6.5.1.10"}, {"status": "affected", "version": "20.9.3.0.17"}, {"status": "affected", "version": "20.6.5.2.4"}, {"status": "affected", "version": "20.6.4.0.21"}, {"status": "affected", "version": "20.9.3.0.18"}, {"status": "affected", "version": "20.6.3.0.46"}, {"status": "affected", "version": "20.6.3.0.47"}, {"status": "affected", "version": "20.9.2.3"}, {"status": "affected", "version": "20.9.3.2_LI_Images"}, {"status": "affected", "version": "20.9.3.0.21"}, {"status": "affected", "version": "20.9.3.0.20"}, {"status": "affected", "version": "20.9.4_LI_Images"}, {"status": "affected", "version": "20.9.4"}, {"status": "affected", "version": "20.6.5.1.11"}, {"status": "affected", "version": "20.12.1"}, {"status": "affected", "version": "20.12.1_LI_Images"}, {"status": "affected", "version": "20.6.5.1.13"}, {"status": "affected", "version": "20.9.3.0.23"}, {"status": "affected", "version": "20.6.5.2.8"}, {"status": "affected", "version": "20.9.4.1"}, {"status": "affected", "version": "20.9.4.1_LI_Images"}, {"status": "affected", "version": "20.9.3.0.25"}, {"status": "affected", "version": "20.9.3.0.24"}, {"status": "affected", "version": "20.6.5.1.14"}, {"status": "affected", "version": "20.3.8"}, {"status": "affected", "version": "20.6.6"}, {"status": "affected", "version": "20.9.3.0.26"}, {"status": "affected", "version": "20.6.3.0.51"}, {"status": "affected", "version": "20.9.3.0.29"}, {"status": "affected", "version": "20.12.2"}, {"status": "affected", "version": "20.12.2_LI_Images"}, {"status": "affected", "version": "20.6.6.0.1"}, {"status": "affected", "version": "20.13.1_LI_Images"}, {"status": "affected", "version": "20.9.4.0.4"}, {"status": "affected", "version": "20.13.1"}, {"status": "affected", "version": "20.9.4.1.1"}, {"status": "affected", "version": "20.9.5"}, {"status": "affected", "version": "20.9.5_LI_Images"}, {"status": "affected", "version": "20.12.3_LI_Images"}, {"status": "affected", "version": "20.12.3"}, {"status": "affected", "version": "20.9.4.1.3"}, {"status": "affected", "version": "20.6.7"}, {"status": "affected", "version": "20.9.5.1"}, {"status": "affected", "version": "20.9.5.1_LI_Images"}, {"status": "affected", "version": "20.9.4.1.6"}, {"status": "affected", "version": "20.14.1"}, {"status": "affected", "version": "20.14.1_LI_Images"}, {"status": "affected", "version": "20.9.5.2"}, {"status": "affected", "version": "20.9.5.2.1"}, {"status": "affected", "version": "20.9.5.2_LI_Images"}, {"status": "affected", "version": "20.12.3.1"}, {"status": "affected", "version": "20.12.4"}, {"status": "affected", "version": "20.15.1_LI_Images"}, {"status": "affected", "version": "20.15.1"}, {"status": "affected", "version": "20.9.5.1.4"}, {"status": "affected", "version": "20.9.5.2.7"}, {"status": "affected", "version": "20.9.5.2.13"}, {"status": "affected", "version": "20.9.6"}, {"status": "affected", "version": "20.9.6_LI_Images"}, {"status": "affected", "version": "20.9.5.2.14"}, {"status": "affected", "version": "20.6.8"}, {"status": "affected", "version": "20.12.4.0.03"}, {"status": "affected", "version": "20.16.1"}, {"status": "affected", "version": "20.16.1_LI_Images"}, {"status": "affected", "version": "20.12.4_LI_Images"}, {"status": "affected", "version": "20.9.5.2.16"}, {"status": "affected", "version": "20.12.4.0.4"}, {"status": "affected", "version": "20.12.401"}, {"status": "affected", "version": "20.9.5.3"}, {"status": "affected", "version": "20.9.5.3_LI_Images"}, {"status": "affected", "version": "20.12.4.1_LI_Images"}, {"status": "affected", "version": "20.12.4.1"}, {"status": "affected", "version": "20.9.5.2.21"}, {"status": "affected", "version": "20.9.6.0.3"}, {"status": "affected", "version": "20.12.4.0.6"}, {"status": "affected", "version": "20.15.2_LI_Images"}, {"status": "affected", "version": "20.15.2"}, {"status": "affected", "version": "20.12.4_Monthly_ES5"}, {"status": "affected", "version": "20.12.5"}, {"status": "affected", "version": "20.12.5_LI_Images"}, {"status": "affected", "version": "20.9.7_LI _Images"}, {"status": "affected", "version": "20.9.7"}, {"status": "affected", "version": "20.15.3"}, {"status": "affected", "version": "20.15.3_ LI _Images"}, {"status": "affected", "version": "20.12.501"}, {"status": "affected", "version": "20.12.5.1_LI_Images"}, {"status": "affected", "version": "20.12.5.1"}, {"status": "affected", "version": "20.12.5.2_LI_Images"}, {"status": "affected", "version": "20.12.5.2"}, {"status": "affected", "version": "20.15.3.1"}, {"status": "affected", "version": "20.15.4_LI_Images"}, {"status": "affected", "version": "20.15.4"}, {"status": "affected", "version": "20.9.7.1_LI _Images"}, {"status": "affected", "version": "20.9.7.1"}, {"status": "affected", "version": "20.18.1"}, {"status": "affected", "version": "20.18.1_LI_Images"}, {"status": "affected", "version": "20.12.6_LI_Images"}, {"status": "affected", "version": "20.12.6"}, {"status": "affected", "version": "20.12.5.1.01"}, {"status": "affected", "version": "20.9.8"}, {"status": "affected", "version": "20.9.8_LI_Images"}, {"status": "affected", "version": "20.18.2"}, {"status": "affected", "version": "20.15.4.1_LI_Images"}, {"status": "affected", "version": "20.15.4.1"}, {"status": "affected", "version": "20.18.2_LI_Images"}]

NVD CPE · APPLICATIONciscocatalyst_sd-wan_managerVulnerable target · 5 assertions

Any version (unconstrained) (>= 20.11, < 20.12.5.3); Any version (unconstrained) (>= 20.13, < 20.15.4.2); Any version (unconstrained) (>= 20.16, < 20.18.2.1); Any version (unconstrained) (< 20.9.8.2); Version 20.12.6Canonical identity product-7d14d24908e295d99b26952868bcdd8b679a703f05b4aac134d1f85c620f6f52Linked exact

Scope supported

Inspect raw assertions

cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.12.6:*:*:*:*:*:*:*
Official link
Linked exact
Role
Vulnerable target
Configuration
0 · node/0 · match 4
Logic
OR
Version bounds
No explicit bounds
Match ID
f5b6e170-73b8-4838-93b4-ad258f3bca7c
cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*
Official link
Linked exact
Role
Vulnerable target
Configuration
0 · node/0 · match 0
Logic
OR
Version bounds
through excluding 20.9.8.2
Match ID
0388bd67-c1ad-4e47-8b1a-22ee1634190e
cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*
Official link
Linked exact
Role
Vulnerable target
Configuration
0 · node/0 · match 1
Logic
OR
Version bounds
from including 20.11; through excluding 20.12.5.3
Match ID
344ca479-f60f-4cd6-83f7-4db38df2eaeb
cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*
Official link
Linked exact
Role
Vulnerable target
Configuration
0 · node/0 · match 2
Logic
OR
Version bounds
from including 20.13; through excluding 20.15.4.2
Match ID
d284ea84-6c27-4a9c-bda2-d1c5bf1f2356
cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*
Official link
Linked exact
Role
Vulnerable target
Configuration
0 · node/0 · match 3
Logic
OR
Version bounds
from including 20.16; through excluding 20.18.2.1
Match ID
b94e1dc2-5da5-4238-8040-6d524ddeaa4f

NVD CPE · APPLICATIONciscosd-wan_vbond_orchestratorVulnerable target · 5 assertions

Any version (unconstrained) (>= 20.11, < 20.12.5.3); Any version (unconstrained) (>= 20.13, < 20.15.4.2); Any version (unconstrained) (>= 20.16, < 20.18.2.1); Any version (unconstrained) (< 20.9.8.2); Version 20.12.6Canonical identity product-d025f55494714adadb54d08c869a60d77d44e2e7cb5a80d35a3a7b482e4cfb78Linked exact

Scope supported

Inspect raw assertions

cpe:2.3:a:cisco:sd-wan_vbond_orchestrator:*:*:*:*:*:*:*:*
Official link
Linked exact
Role
Vulnerable target
Configuration
0 · node/0 · match 5
Logic
OR
Version bounds
through excluding 20.9.8.2
Match ID
d22b968f-3ab3-41aa-81cc-a1173654c731
cpe:2.3:a:cisco:sd-wan_vbond_orchestrator:*:*:*:*:*:*:*:*
Official link
Linked exact
Role
Vulnerable target
Configuration
0 · node/0 · match 6
Logic
OR
Version bounds
from including 20.11; through excluding 20.12.5.3
Match ID
89d0736b-ea67-44fd-a9e3-6729ab690295
cpe:2.3:a:cisco:sd-wan_vbond_orchestrator:20.12.6:*:*:*:*:*:*:*
Official link
Linked exact
Role
Vulnerable target
Configuration
0 · node/0 · match 9
Logic
OR
Version bounds
No explicit bounds
Match ID
033ac84e-6a5f-4eff-b610-5c16d4c2cc9d
cpe:2.3:a:cisco:sd-wan_vbond_orchestrator:*:*:*:*:*:*:*:*
Official link
Linked exact
Role
Vulnerable target
Configuration
0 · node/0 · match 8
Logic
OR
Version bounds
from including 20.16; through excluding 20.18.2.1
Match ID
a896a8b2-1517-4438-819e-db2cc0214040
cpe:2.3:a:cisco:sd-wan_vbond_orchestrator:*:*:*:*:*:*:*:*
Official link
Linked exact
Role
Vulnerable target
Configuration
0 · node/0 · match 7
Logic
OR
Version bounds
from including 20.13; through excluding 20.15.4.2
Match ID
06587810-b5be-49fe-a009-bb53a2b45825

NVD CPE · APPLICATIONciscosd-wan_vsmart_controllerVulnerable target · 5 assertions

Any version (unconstrained) (>= 20.11, < 20.12.5.3); Any version (unconstrained) (>= 20.13, < 20.15.4.2); Any version (unconstrained) (>= 20.16, < 20.18.2.1); Any version (unconstrained) (< 20.9.8.2); Version 20.12.6Canonical identity product-93425b32f8b59a37b2b15ffd9112df06c7de54c9717d64f294043cca46c8bd91Linked exact

Scope supported

Inspect raw assertions

cpe:2.3:a:cisco:sd-wan_vsmart_controller:20.12.6:*:*:*:*:*:*:*
Official link
Linked exact
Role
Vulnerable target
Configuration
0 · node/0 · match 14
Logic
OR
Version bounds
No explicit bounds
Match ID
3dd7a58e-c95f-48c2-8359-39afe7fa47be
cpe:2.3:a:cisco:sd-wan_vsmart_controller:*:*:*:*:*:*:*:*
Official link
Linked exact
Role
Vulnerable target
Configuration
0 · node/0 · match 11
Logic
OR
Version bounds
from including 20.11; through excluding 20.12.5.3
Match ID
7b720be5-bd1d-4bfa-a899-bfb20c7499fc
cpe:2.3:a:cisco:sd-wan_vsmart_controller:*:*:*:*:*:*:*:*
Official link
Linked exact
Role
Vulnerable target
Configuration
0 · node/0 · match 13
Logic
OR
Version bounds
from including 20.16; through excluding 20.18.2.1
Match ID
e709aab8-3567-49eb-8090-033468743ab4
cpe:2.3:a:cisco:sd-wan_vsmart_controller:*:*:*:*:*:*:*:*
Official link
Linked exact
Role
Vulnerable target
Configuration
0 · node/0 · match 10
Logic
OR
Version bounds
through excluding 20.9.8.2
Match ID
9c42e29a-d80e-4303-a33e-660099cf78f7
cpe:2.3:a:cisco:sd-wan_vsmart_controller:*:*:*:*:*:*:*:*
Official link
Linked exact
Role
Vulnerable target
Configuration
0 · node/0 · match 12
Logic
OR
Version bounds
from including 20.13; through excluding 20.15.4.2
Match ID
4bdf8cf0-99ba-461f-99d6-4b1abe9c2fff

Affected-product evidence

Accepted scope and product mapping

3 canonical links · 1 source-reported links

Mapping establishedEvidence supported

vendor-0774b265c0e837e737aaf99ed0f2450c048e61f34267ca59d8623878b839334e · product-7d14d24908e295d99b26952868bcdd8b679a703f05b4aac134d1f85c620f6f52

Source class: Nvd cpe vulnerable target
Assertions: 5
Mapping revision: cpe23-exact-mapping-v1
Observed cutoff: Aug 27, 2026

Retained assertion IDs

2d3808c9-b0f4-437b-99eb-1e4ca9f86df1999bdfa7-a13e-485b-8a25-dffe2b7f0de3babac3ff-8118-44ba-8cf4-086bc151f282ca144ea1-95f9-4b8a-a1ad-83d0c57dfb04f15fd53e-c0c0-4875-a2b0-e0e14a88b0c0

Mapping establishedEvidence supported

vendor-0774b265c0e837e737aaf99ed0f2450c048e61f34267ca59d8623878b839334e · product-93425b32f8b59a37b2b15ffd9112df06c7de54c9717d64f294043cca46c8bd91

Source class: Nvd cpe vulnerable target
Assertions: 5
Mapping revision: cpe23-exact-mapping-v1
Observed cutoff: Aug 27, 2026

Retained assertion IDs

21a97165-be4e-4e17-a060-4e94b41487ef2d9eb4d2-1412-465c-afed-65eb91d716a754524bfe-09ec-46f4-8720-1871df7f5e0f86169208-520f-4f90-9d6b-49aa7e5c9f02be655fe6-e371-4aa9-8f75-425adb1811e4

Mapping establishedEvidence supported

vendor-0774b265c0e837e737aaf99ed0f2450c048e61f34267ca59d8623878b839334e · product-d025f55494714adadb54d08c869a60d77d44e2e7cb5a80d35a3a7b482e4cfb78

Source class: Nvd cpe vulnerable target
Assertions: 5
Mapping revision: cpe23-exact-mapping-v1
Observed cutoff: Aug 27, 2026

Retained assertion IDs

4afb00a9-8fbb-4e3a-af73-62f75bc4fc6c822cd14c-1884-4e2f-b324-b1af3755de60d84f10cd-96db-49a6-888e-0d4285616452ea256a7a-54fc-4dfe-b642-d49e645c6b04fd8106b9-49d0-4023-81ed-13cd207d9d8b

Source-reported scopeSource-reported scope

Canonical linkage remains open; the cited source assertion is retained below.

Vendor specified only by source · Product specified only by source

Source class: Direct cve affected
Assertions: 1
Mapping revision: cpe23-exact-mapping-v1
Observed cutoff: Aug 27, 2026

Retained assertion IDs

4fde6c1a-ff59-4190-8b88-1f8afd8ed38b

Assessments

CVSS by origin

10.0

NVDCVSS 3.1 · role Primary · priority eligiblevalid_matchCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

10.0

psirt@cisco.comCVSS 3.1 · role Secondary · priority eligiblevalid_matchCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

10.0

ciscoCVSS 3.1 · role unknown · display onlyDirect record assessment retained outside normalized eligibilityCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Direct CVE/CNA normalized decisions

10.0Priority eligible

cisco

CVSS 3.1 · Primary · Original assertion · rank 1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Validation: Valid match
Recomputed: 10.0
Decision reason: Evidence supported
Policy: casca-direct-cvss-eligibility-v1

Assessments are retained side by side under closed precedence. Cascade never averages CVSS.

Evidence boundaries

KEV membership is authoritative for the catalog, not proof of exposure in any environment.
EPSS is a dated model probability and not an individual-environment prediction.
Affected or fixed status applies only to the exact cited product and version scope; remaining scope stays source-scoped.
NVD-carried upstream facts remain derivative; independent corroboration requires a separately authored source.
Only NVD metrics validated under the generation-bound calculator are Public Priority eligible; direct CVE record metrics remain display-only.
NVD CVSS source eligibility is closed: NVD-authored, exact record-source, or registered same-CVE container origin; unmapped sources remain display-only.
Core replay supports the active and immediately prior generation; retrospective valid-at replay is deferred.
OSV aggregation and OSV-converted NVD material are not independent corroboration.
Red Hat facts are vendor assertions for the exact supplied products.
Nonmembership and not-yet-observed states are not proof of safety.