Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.
Evidence dossier
CVE-2026-20128
Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability
63.3–78.3Priority evidence range
gen-56ccdaf9Normalized restatement
A vulnerability in the Data Collection Agent (DCA) feature of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain DCA user privileges on an affected system. This vulnerability is due to the presence of a credential file for the DCA user on an affected system. An attacker could exploit this vulnerability by sending a crafted HTTP request and reading the file that contains the DCA password from that affected system. A successful exploit could allow the attacker to access another affected system and gain DCA user privileges. Note: Cisco Catalyst SD-WAN Manager releases 20.18 and later are not affected by this vulnerability.
- State
- PUBLISHED
- Published
- Feb 25, 2026
- Updated
- Apr 21, 2026
- Evidence coverage
- 85%
2026-07-18 · v2026.06.15 · percentile 91.6%
Distinct CVSS assessments remain side by side; none are averaged.
Source comparison
Who said what
ciscooriginal assertion
container
Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability
Jul 19, 2026Original evidence ↗
CISA KEVoriginal assertion
observed_exploitation
Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability
Jul 19, 2026Original evidence ↗
FIRST EPSSoriginal assertion
model_probability
Probability 0.052690000000; percentile 0.916430000000
Jul 19, 2026Original evidence ↗
Applicability
Cited product scope
CiscoCisco Catalyst SD-WAN Manager
[{"status": "affected", "version": "20.1.12"}, {"status": "affected", "version": "19.2.1"}, {"status": "affected", "version": "18.4.4"}, {"status": "affected", "version": "18.4.5"}, {"status": "affected", "version": "20.1.1.1"}, {"status": "affected", "version": "20.1.1"}, {"status": "affected", "version": "19.3.0"}, {"status": "affected", "version": "19.2.2"}, {"status": "affected", "version": "19.2.099"}, {"status": "affected", "version": "18.3.6"}, {"status": "affected", "version": "18.3.7"}, {"status": "affected", "version": "19.2.0"}, {"status": "affected", "version": "18.3.8"}, {"status": "affected", "version": "19.0.0"}, {"status": "affected", "version": "19.1.0"}, {"status": "affected", "version": "18.4.302"}, {"status": "affected", "version": "18.4.303"}, {"status": "affected", "version": "19.2.097"}, {"status": "affected", "version": "19.2.098"}, {"status": "affected", "version": "17.2.10"}, {"status": "affected", "version": "18.3.6.1"}, {"status": "affected", "version": "19.0.1a"}, {"status": "affected", "version": "18.2.0"}, {"status": "affected", "version": "18.4.3"}, {"status": "affected", "version": "18.4.1"}, {"status": "affected", "version": "17.2.8"}, {"status": "affected", "version": "18.3.3.1"}, {"status": "affected", "version": "18.4.0"}, {"status": "affected", "version": "18.3.1"}, {"status": "affected", "version": "17.2.6"}, {"status": "affected", "version": "17.2.9"}, {"status": "affected", "version": "18.3.4"}, {"status": "affected", "version": "17.2.5"}, {"status": "affected", "version": "18.3.1.1"}, {"status": "affected", "version": "18.3.5"}, {"status": "affected", "version": "18.4.0.1"}, {"status": "affected", "version": "18.3.3"}, {"status": "affected", "version": "17.2.7"}, {"status": "affected", "version": "18.3.0"}, {"status": "affected", "version": "19.2.3"}, {"status": "affected", "version": "18.4.501_ES"}, {"status": "affected", "version": "20.3.1"}, {"status": "affected", "version": "20.1.2"}, {"status": "affected", "version": "19.2.929"}, {"status": "affected", "version": "19.2.31"}, {"status": "affected", "version": "20.3.2"}, {"status": "affected", "version": "19.2.32"}, {"status": "affected", "version": "20.3.2.1"}, {"status": "affected", "version": "20.3.2.1_927"}, {"status": "affected", "version": "18.4.6"}, {"status": "affected", "version": "20.3.2_928"}, {"status": "affected", "version": "20.3.2_929"}, {"status": "affected", "version": "20.4.1.0.1"}, {"status": "affected", "version": "20.3.2.1_930"}, {"status": "affected", "version": "19.2.4"}, {"status": "affected", "version": "20.5.0.1.1"}, {"status": "affected", "version": "20.4.1.1"}, {"status": "affected", "version": "20.3.3"}, {"status": "affected", "version": "19.2.4.0.1"}, {"status": "affected", "version": "20.3.2_937"}, {"status": "affected", "version": "20.5.1"}, {"status": "affected", "version": "20.1.3"}, {"status": "affected", "version": "20.3.3.0.4"}, {"status": "affected", "version": "20.3.3.1.2"}, {"status": "affected", "version": "20.3.3.1.1"}, {"status": "affected", "version": "20.4.1.2"}, {"status": "affected", "version": "20.3.3.0.2"}, {"status": "affected", "version": "20.4.1.1.5"}, {"status": "affected", "version": "20.4.1.0.02"}, {"status": "affected", "version": "20.3.3.1.7"}, {"status": "affected", "version": "20.3.3.1.5"}, {"status": "affected", "version": "20.5.1.0.1"}, {"status": "affected", "version": "20.3.3.1.10"}, {"status": "affected", "version": "20.3.3.0.8"}, {"status": "affected", "version": "20.4.2"}, {"status": "affected", "version": "20.3.4"}, {"status": "affected", "version": "20.3.3.0.14"}, {"status": "affected", "version": "19.2.4.0.8"}, {"status": "affected", "version": "19.2.4.0.9"}, {"status": "affected", "version": "20.3.4.0.1"}, {"status": "affected", "version": "20.3.2.0.5"}, {"status": "affected", "version": "20.5.1.0.2"}, {"status": "affected", "version": "20.6.1.1"}, {"status": "affected", "version": "20.6.0.18.3"}, {"status": "affected", "version": "20.3.2.0.6"}, {"status": "affected", "version": "20.6.0.18.4"}, {"status": "affected", "version": "20.4.2.0.2"}, {"status": "affected", "version": "20.3.3.0.16"}, {"status": "affected", "version": "20.6.1.0.1"}, {"status": "affected", "version": "20.3.4.0.6"}, {"status": "affected", "version": "20.7.1EFT2"}, {"status": "affected", "version": "20.3.4.0.9"}, {"status": "affected", "version": "20.3.4.0.11"}, {"status": "affected", "version": "20.3.3.0.18"}, {"status": "affected", "version": "20.6.2.1"}, {"status": "affected", "version": "20.3.4.1"}, {"status": "affected", "version": "20.4.2.1"}, {"status": "affected", "version": "20.4.2.1.1"}, {"status": "affected", "version": "20.3.4.1.1"}, {"status": "affected", "version": "20.3.813"}, {"status": "affected", "version": "20.3.4.0.19"}, {"status": "affected", "version": "20.4.2.2.1"}, {"status": "affected", "version": "20.5.1.2"}, {"status": "affected", "version": "20.3.814"}, {"status": "affected", "version": "20.4.2.2"}, {"status": "affected", "version": "20.6.2.2"}, {"status": "affected", "version": "20.3.4.2.1"}, {"status": "affected", "version": "20.3.4.1.2"}, {"status": "affected", "version": "20.3.4.0.20"}, {"status": "affected", "version": "20.6.2.2.3"}, {"status": "affected", "version": "20.4.2.2.2"}, {"status": "affected", "version": "20.6.2.0.4"}, {"status": "affected", "version": "20.3.4.0.24"}, {"status": "affected", "version": "20.6.2.2.7"}, {"status": "affected", "version": "20.3.4.2.2"}, {"status": "affected", "version": "20.4.2.2.4"}, {"status": "affected", "version": "20.3.5.0.8"}, {"status": "affected", "version": "20.3.5.0.9"}, {"status": "affected", "version": "20.3.5.0.7"}, {"status": "affected", "version": "20.6.3.0.2"}, {"status": "affected", "version": "20.9.1EFT2"}, {"status": "affected", "version": "20.3.6"}, {"status": "affected", "version": "20.3.7"}, {"status": "affected", "version": "20.4.2.3"}, {"status": "affected", "version": "20.3.5.1"}, {"status": "affected", "version": "20.3.4.3"}, {"status": "affected", "version": "20.3.3.2"}, {"status": "affected", "version": "20.3.7.1"}, {"status": "affected", "version": "20.3.4.0.25"}, {"status": "affected", "version": "20.6.2.2.4"}, {"status": "affected", "version": "20.6.1.2"}, {"status": "affected", "version": "20.1.3.1"}, {"status": "affected", "version": "20.6.5.1.4"}, {"status": "affected", "version": "20.3.8"}, {"status": "affected", "version": "20.12.501"}, {"status": "affected", "version": "26.1.1"}]unknownUnknown vendorUnknown product
cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*; end excluding 20.9.8.2supportedUnknown vendorUnknown product
cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*; start including 20.10; end excluding 20.12.5.3supportedUnknown vendorUnknown product
cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*; start including 20.13; end excluding 20.15.4.2supportedUnknown vendorUnknown product
cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*; start including 20.16; end excluding 20.18supportedUnknown vendorUnknown product
cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.12.6:*:*:*:*:*:*:*supportedAssessments
CVSS by origin
psirt@cisco.comCVSS 3.1 · role Secondary
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:HciscoCVSS 3.1 · role unknown
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:HLimitations and unknowns
- KEV membership is authoritative for the catalog, not proof of exposure in any environment.
- EPSS is a dated model probability and not an individual-environment prediction.
- Affected or fixed status applies only to the exact cited product and version scope; unresolved scope remains unknown.
- NVD-carried upstream facts remain derivative and are not independent corroboration.
- Only NVD metrics validated under the generation-bound calculator are Public Priority eligible; direct CVE record metrics remain display-only.
- NVD CVSS source eligibility is closed: NVD-authored, exact record-source, or registered same-CVE container origin; unmapped sources remain display-only.
- Factor D is unknown in Public Core because no accepted canonical mapping-obligation ledger is present.
- Core replay supports the active and immediately prior generation; retrospective valid-at replay is deferred.