CISA KEV · catalog date Jun 9, 2026 · first observed Jul 19, 2026
Evidence dossier
CVE-2026-20245
Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation Vulnerability
Exploited in the wild (CISA KEV since Jun 9, 2026). cisco reports CVSS 3.1 7.8. EPSS estimates 25.3% exploit likelihood as of Aug 27, 2026.
As of Aug 27, 2026
Normalized restatement
A vulnerability in the CLI of Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an authenticated, local attacker to execute arbitrary commands as root by supplying a crafted file to the affected system. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by uploading a crafted file to the affected system. A successful exploit could allow the attacker to perform command injection attacks on an affected system and elevate their privileges as the root user. To exploit this vulnerability, the attacker must have netadmin privileges on the affected system. This would require valid credentials or exploitation of or . Cisco is not aware of successful exploitation by other methods. Cisco has observed limited cases where the exploitation of this bug resulted in a configuration change pushed to edge devices. Cisco recommends that customers upgrade to the fixed software that is documented in the that was published on May 14, 2026, and verify the configuration of the edge devices.
- State
- PUBLISHED
- Published
- Jun 4, 2026
- Updated
- Jul 21, 2026
- Evidence coverage
- 85%
Evidence chronology
What was known when
- Source dateFirst observed by CASCACISA KEVOriginal evidence ↗
Exploitation cataloged: Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability
Inspect raw assertion
- Field
observed_exploitation- Value
- Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability
- Source dateSource date omittedFirst observed by CASCACISA-ADPOriginal evidence ↗
Record text: CISA ADP Vulnrichment
Inspect raw assertion
- Field
container- Value
- CISA ADP Vulnrichment
- Source dateSource date omittedFirst observed by CASCAciscoOriginal evidence ↗
Record text: Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation Vulnerability
Inspect raw assertion
- Field
container- Value
- Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation Vulnerability
- Source dateFirst observed by CASCAFIRST EPSSOriginal evidence ↗
EPSS score: 25.32% probability · 97.78th percentile
Inspect raw assertion
- Field
model_probability- Value
- Probability 0.253230000000; percentile 0.977800000000
FIRST EPSS · score date Aug 27, 2026 · 97.8th percentile · first observed Aug 27, 2026
cisco · CVSS 3.1 · first observed Jul 27, 2026 · same-version scores align in this snapshot
Evidence detail
Source limits and decisions
Why each evidence state has this value
casca-unknown-reasons-v1Eligible evidence is present for this bounded claim.
- Revision
- evidence-policy-v1.1.0
- Cutoff
- Aug 27, 2026
- Resolution
- None
Eligible evidence is present for this bounded claim.
- Revision
- evidence-policy-v1.1.0
- Cutoff
- Aug 27, 2026
- Resolution
- None
Eligible evidence is present for this bounded claim.
- Revision
- casca-direct-cvss-eligibility-v1
- Cutoff
- Aug 27, 2026
- Resolution
- None
The cited source assertion is retained while canonical product linkage remains open.
- Revision
- casca-factor-d-obligations-v1
- Cutoff
- Aug 27, 2026
- Resolution
- Resolve identity
Source comparison
Who said what
Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability
Inspect raw assertion
- Field
observed_exploitation- Value
- Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability
CISA ADP Vulnrichment
Inspect raw assertion
- Field
container- Value
- CISA ADP Vulnrichment
Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation Vulnerability
Inspect raw assertion
- Field
container- Value
- Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation Vulnerability
25.32% probability · 97.78th percentile
Inspect raw assertion
- Field
model_probability- Value
- Probability 0.253230000000; percentile 0.977800000000
Applicability
Cited product scope
Grouped from 1 configuration nodes in this exact snapshot. Visual grouping is navigational; asset exposure and root cause require cited evidence.
Identity source boundaries
- Cpe dictionary1,775,266 records · observed through 2026-07-21T06:45:29.809Z
27d65b0f-b718-4b4f-bb79-c47c68d09dfa - Cpe match643,502 records · observed through 2026-07-21T08:13:17.697Z
955dae73-7302-438b-aee1-058d7cc5d48e
4 scope groups
Canonical linkage remains open; the cited source assertion is retained below.
Inspect raw assertion
[{"status": "affected", "version": "20.6.4"}, {"status": "affected", "version": "20.9.2"}, {"status": "affected", "version": "20.3.6"}, {"status": "affected", "version": "20.7.2"}, {"status": "affected", "version": "20.7.1"}, {"status": "affected", "version": "20.5.1"}, {"status": "affected", "version": "20.6.2"}, {"status": "affected", "version": "19.3.0"}, {"status": "affected", "version": "20.6.1"}, {"status": "affected", "version": "17.2.4"}, {"status": "affected", "version": "18.2.0"}, {"status": "affected", "version": "18.4.6"}, {"status": "affected", "version": "19.1.0"}, {"status": "affected", "version": "19.2.4"}, {"status": "affected", "version": "19.2.929"}, {"status": "affected", "version": "18.3.8"}, {"status": "affected", "version": "18.4.303"}, {"status": "affected", "version": "18.3.7"}, {"status": "affected", "version": "18.4.1"}, {"status": "affected", "version": "19.2.097"}, {"status": "affected", "version": "19.2.0"}, {"status": "affected", "version": "19.2.099"}, {"status": "affected", "version": "18.3.6"}, {"status": "affected", "version": "20.4.2"}, {"status": "affected", "version": "19.0.0"}, {"status": "affected", "version": "20.9.1"}, {"status": "affected", "version": "20.3.5"}, {"status": "affected", "version": "20.3.1"}, {"status": "affected", "version": "18.3.5"}, {"status": "affected", "version": "20.6.3"}, {"status": "affected", "version": "18.4.3"}, {"status": "affected", "version": "18.4.4"}, {"status": "affected", "version": "18.3.3"}, {"status": "affected", "version": "17.2.8"}, {"status": "affected", "version": "20.8.1"}, {"status": "affected", "version": "19.2.32"}, {"status": "affected", "version": "19.2.2"}, {"status": "affected", "version": "17.2.5"}, {"status": "affected", "version": "18.4.0"}, {"status": "affected", "version": "20.4.1.1"}, {"status": "affected", "version": "20.1.3"}, {"status": "affected", "version": "20.1.2"}, {"status": "affected", "version": "17.2.10"}, {"status": "affected", "version": "19.2.098"}, {"status": "affected", "version": "20.1.1"}, {"status": "affected", "version": "17.2.6"}, {"status": "affected", "version": "19.2.1"}, {"status": "affected", "version": "18.3.4"}, {"status": "affected", "version": "20.4.1"}, {"status": "affected", "version": "17.2.9"}, {"status": "affected", "version": "19.2.31"}, {"status": "affected", "version": "19.0.1a"}, {"status": "affected", "version": "18.3.0"}, {"status": "affected", "version": "17.2.7"}, {"status": "affected", "version": "18.4.5"}, {"status": "affected", "version": "20.3.4"}, {"status": "affected", "version": "20.3.3"}, {"status": "affected", "version": "20.4.1.2"}, {"status": "affected", "version": "20.3.2"}, {"status": "affected", "version": "18.3.1"}, {"status": "affected", "version": "20.1.12"}, {"status": "affected", "version": "19.2.3"}, {"status": "affected", "version": "20.10.1"}, {"status": "affected", "version": "20.6.5"}, {"status": "affected", "version": "20.3.7"}, {"status": "affected", "version": "20.9.3"}, {"status": "affected", "version": "20.11.1"}, {"status": "affected", "version": "20.6.3.2"}, {"status": "affected", "version": "20.4.2.3"}, {"status": "affected", "version": "20.3.5.1"}, {"status": "affected", "version": "20.3.4.3"}, {"status": "affected", "version": "20.9.3.1"}, {"status": "affected", "version": "20.6.4.1"}, {"status": "affected", "version": "20.3.3.2"}, {"status": "affected", "version": "20.6.5.2"}, {"status": "affected", "version": "20.3.7.1"}, {"status": "affected", "version": "20.11.1.1"}, {"status": "affected", "version": "20.10.1.1"}, {"status": "affected", "version": "20.6.1.2"}, {"status": "affected", "version": "20.1.3.1"}, {"status": "affected", "version": "20.9.2.2"}, {"status": "affected", "version": "20.6.5.3"}, {"status": "affected", "version": "20.6.3.3"}, {"status": "affected", "version": "20.3.7.2"}, {"status": "affected", "version": "20.6.5.4"}, {"status": "affected", "version": "20.9.2.3"}, {"status": "affected", "version": "20.9.4"}, {"status": "affected", "version": "20.12.1"}, {"status": "affected", "version": "20.3.8"}, {"status": "affected", "version": "20.6.6"}, {"status": "affected", "version": "20.12.2"}, {"status": "affected", "version": "20.13.1"}, {"status": "affected", "version": "20.9.5"}, {"status": "affected", "version": "20.12.3"}, {"status": "affected", "version": "20.6.7"}, {"status": "affected", "version": "20.9.5.1"}, {"status": "affected", "version": "20.14.1"}, {"status": "affected", "version": "20.12.3.1"}, {"status": "affected", "version": "20.12.4"}, {"status": "affected", "version": "20.15.1"}, {"status": "affected", "version": "20.9.6"}, {"status": "affected", "version": "20.6.8"}, {"status": "affected", "version": "20.16.1"}, {"status": "affected", "version": "20.9.5.3"}, {"status": "affected", "version": "20.12.4.1"}, {"status": "affected", "version": "20.15.2"}, {"status": "affected", "version": "20.12.5"}, {"status": "affected", "version": "20.9.7"}, {"status": "affected", "version": "20.15.3"}, {"status": "affected", "version": "20.12.5.1"}, {"status": "affected", "version": "20.12.5.2"}, {"status": "affected", "version": "20.15.4"}, {"status": "affected", "version": "20.9.7.1"}, {"status": "affected", "version": "20.18.1"}, {"status": "affected", "version": "20.12.6"}, {"status": "affected", "version": "20.9.8"}, {"status": "affected", "version": "20.15.4.1"}, {"status": "affected", "version": "20.18.2"}, {"status": "affected", "version": "26.1.1"}, {"status": "affected", "version": "20.15.4.2"}, {"status": "affected", "version": "20.18.2.1"}, {"status": "affected", "version": "20.12.5.3"}, {"status": "affected", "version": "20.12.6.1"}, {"status": "affected", "version": "20.9.8.2"}, {"status": "affected", "version": "20.15.5"}, {"status": "affected", "version": "20.18.3"}, {"status": "affected", "version": "20.12.7"}, {"status": "affected", "version": "20.9.9"}, {"status": "affected", "version": "20.18.2.2"}, {"status": "affected", "version": "20.12.5.4"}, {"status": "affected", "version": "20.12.7.1"}, {"status": "affected", "version": "20.15.5.1"}, {"status": "affected", "version": "20.15.4.3"}, {"status": "affected", "version": "20.12.6.2"}, {"status": "affected", "version": "20.15.5.2"}, {"status": "affected", "version": "20.15.4.4"}, {"status": "affected", "version": "26.1.1.1"}, {"status": "affected", "version": "20.9.9.1"}, {"status": "affected", "version": "26.1.1.2"}, {"status": "affected", "version": "20.15.4.5"}, {"status": "affected", "version": "20.15.5.3"}]Canonical linkage remains open; the cited source assertion is retained below.
Inspect raw assertion
[{"status": "affected", "version": "20.1.12"}, {"status": "affected", "version": "19.2.1"}, {"status": "affected", "version": "18.4.4"}, {"status": "affected", "version": "18.4.5"}, {"status": "affected", "version": "20.1.1.1"}, {"status": "affected", "version": "20.1.1"}, {"status": "affected", "version": "19.3.0"}, {"status": "affected", "version": "19.2.2"}, {"status": "affected", "version": "19.2.099"}, {"status": "affected", "version": "18.3.6"}, {"status": "affected", "version": "18.3.7"}, {"status": "affected", "version": "19.2.0"}, {"status": "affected", "version": "18.3.8"}, {"status": "affected", "version": "19.0.0"}, {"status": "affected", "version": "19.1.0"}, {"status": "affected", "version": "18.4.302"}, {"status": "affected", "version": "18.4.303"}, {"status": "affected", "version": "19.2.097"}, {"status": "affected", "version": "19.2.098"}, {"status": "affected", "version": "17.2.10"}, {"status": "affected", "version": "18.3.6.1"}, {"status": "affected", "version": "19.0.1a"}, {"status": "affected", "version": "18.2.0"}, {"status": "affected", "version": "18.4.3"}, {"status": "affected", "version": "18.4.1"}, {"status": "affected", "version": "17.2.8"}, {"status": "affected", "version": "18.3.3.1"}, {"status": "affected", "version": "18.4.0"}, {"status": "affected", "version": "18.3.1"}, {"status": "affected", "version": "17.2.6"}, {"status": "affected", "version": "17.2.9"}, {"status": "affected", "version": "18.3.4"}, {"status": "affected", "version": "17.2.5"}, {"status": "affected", "version": "18.3.1.1"}, {"status": "affected", "version": "18.3.5"}, {"status": "affected", "version": "18.4.0.1"}, {"status": "affected", "version": "18.3.3"}, {"status": "affected", "version": "17.2.7"}, {"status": "affected", "version": "17.2.4"}, {"status": "affected", "version": "18.3.0"}, {"status": "affected", "version": "19.2.3"}, {"status": "affected", "version": "18.4.501_ES"}, {"status": "affected", "version": "20.3.1"}, {"status": "affected", "version": "20.1.2"}, {"status": "affected", "version": "19.2.929"}, {"status": "affected", "version": "19.2.31"}, {"status": "affected", "version": "20.3.2"}, {"status": "affected", "version": "19.2.32"}, {"status": "affected", "version": "20.3.2_925"}, {"status": "affected", "version": "20.3.2.1"}, {"status": "affected", "version": "20.3.2.1_927"}, {"status": "affected", "version": "18.4.6"}, {"status": "affected", "version": "20.1.2_937"}, {"status": "affected", "version": "20.4.1"}, {"status": "affected", "version": "20.3.2_928"}, {"status": "affected", "version": "20.3.2_929"}, {"status": "affected", "version": "20.4.1.0.1"}, {"status": "affected", "version": "20.3.2.1_930"}, {"status": "affected", "version": "19.2.4"}, {"status": "affected", "version": "20.5.0.1.1"}, {"status": "affected", "version": "20.4.1.1"}, {"status": "affected", "version": "20.3.3"}, {"status": "affected", "version": "19.2.4.0.1"}, {"status": "affected", "version": "20.3.2_937"}, {"status": "affected", "version": "20.3.3.1"}, {"status": "affected", "version": "20.5.1"}, {"status": "affected", "version": "20.1.3"}, {"status": "affected", "version": "20.3.3.0.4"}, {"status": "affected", "version": "20.3.3.1.2"}, {"status": "affected", "version": "20.3.3.1.1"}, {"status": "affected", "version": "20.4.1.2"}, {"status": "affected", "version": "20.3.3.0.2"}, {"status": "affected", "version": "20.4.1.1.5"}, {"status": "affected", "version": "20.4.1.0.01"}, {"status": "affected", "version": "20.4.1.0.02"}, {"status": "affected", "version": "20.3.3.1.7"}, {"status": "affected", "version": "20.3.3.1.5"}, {"status": "affected", "version": "20.5.1.0.1"}, {"status": "affected", "version": "20.3.3.1.10"}, {"status": "affected", "version": "20.3.3.0.8"}, {"status": "affected", "version": "20.4.2"}, {"status": "affected", "version": "20.4.2.0.1"}, {"status": "affected", "version": "20.3.4"}, {"status": "affected", "version": "20.3.3.0.14"}, {"status": "affected", "version": "19.2.4.0.8"}, {"status": "affected", "version": "19.2.4.0.9"}, {"status": "affected", "version": "20.3.4.0.1"}, {"status": "affected", "version": "20.3.2.0.5"}, {"status": "affected", "version": "20.6.1"}, {"status": "affected", "version": "20.5.1.0.2"}, {"status": "affected", "version": "20.3.3.0.17"}, {"status": "affected", "version": "20.6.1.1"}, {"status": "affected", "version": "20.6.0.18.3"}, {"status": "affected", "version": "20.3.2.0.6"}, {"status": "affected", "version": "20.6.0.18.4"}, {"status": "affected", "version": "20.4.2.0.2"}, {"status": "affected", "version": "20.3.3.0.16"}, {"status": "affected", "version": "20.3.4.0.5"}, {"status": "affected", "version": "20.6.1.0.1"}, {"status": "affected", "version": "20.3.4.0.6"}, {"status": "affected", "version": "20.6.2"}, {"status": "affected", "version": "20.7.1EFT2"}, {"status": "affected", "version": "20.3.4.0.9"}, {"status": "affected", "version": "20.3.4.0.11"}, {"status": "affected", "version": "20.4.2.0.4"}, {"status": "affected", "version": "20.3.3.0.18"}, {"status": "affected", "version": "20.7.1"}, {"status": "affected", "version": "20.6.2.1"}, {"status": "affected", "version": "20.3.4.1"}, {"status": "affected", "version": "20.5.1.1"}, {"status": "affected", "version": "20.4.2.1"}, {"status": "affected", "version": "20.4.2.1.1"}, {"status": "affected", "version": "20.3.4.1.1"}, {"status": "affected", "version": "20.3.813"}, {"status": "affected", "version": "20.3.4.0.19"}, {"status": "affected", "version": "20.4.2.2.1"}, {"status": "affected", "version": "20.5.1.2"}, {"status": "affected", "version": "20.3.4.2"}, {"status": "affected", "version": "20.3.814"}, {"status": "affected", "version": "20.4.2.2"}, {"status": "affected", "version": "20.6.2.2"}, {"status": "affected", "version": "20.3.4.2.1"}, {"status": "affected", "version": "20.7.1.1"}, {"status": "affected", "version": "20.3.4.1.2"}, {"status": "affected", "version": "20.6.2.2.2"}, {"status": "affected", "version": "20.3.4.0.20"}, {"status": "affected", "version": "20.6.2.2.3"}, {"status": "affected", "version": "20.4.2.2.2"}, {"status": "affected", "version": "20.3.5"}, {"status": "affected", "version": "20.6.2.0.4"}, {"status": "affected", "version": "20.4.2.2.3"}, {"status": "affected", "version": "20.3.4.0.24"}, {"status": "affected", "version": "20.6.2.2.7"}, {"status": "affected", "version": "20.6.3"}, {"status": "affected", "version": "20.3.4.2.2"}, {"status": "affected", "version": "20.4.2.2.4"}, {"status": "affected", "version": "20.7.1.0.2"}, {"status": "affected", "version": "20.8.1"}, {"status": "affected", "version": "20.3.5.0.8"}, {"status": "affected", "version": "20.3.5.0.9"}, {"status": "affected", "version": "20.4.2.2.8"}, {"status": "affected", "version": "20.3.5.0.7"}, {"status": "affected", "version": "20.6.3.0.7"}, {"status": "affected", "version": "20.6.3.0.5"}, {"status": "affected", "version": "20.6.3.0.10"}, {"status": "affected", "version": "20.6.3.0.2"}, {"status": "affected", "version": "20.7.2"}, {"status": "affected", "version": "20.9.1EFT2"}, {"status": "affected", "version": "20.6.3.0.11"}, {"status": "affected", "version": "20.6.3.1"}, {"status": "affected", "version": "20.6.3.0.14"}, {"status": "affected", "version": "20.6.4"}, {"status": "affected", "version": "20.9.1"}, {"status": "affected", "version": "20.6.3.0.19"}, {"status": "affected", "version": "20.6.3.0.18"}, {"status": "affected", "version": "20.3.6"}, {"status": "affected", "version": "20.9.1.1"}, {"status": "affected", "version": "20.6.3.0.23"}, {"status": "affected", "version": "20.6.4.0.4"}, {"status": "affected", "version": "20.6.3.0.25"}, {"status": "affected", "version": "20.6.5"}, {"status": "affected", "version": "20.6.3.0.27"}, {"status": "affected", "version": "20.9.2"}, {"status": "affected", "version": "20.9.2.1"}, {"status": "affected", "version": "20.6.3.0.29"}, {"status": "affected", "version": "20.6.3.0.31"}, {"status": "affected", "version": "20.6.3.0.32"}, {"status": "affected", "version": "20.10.1"}, {"status": "affected", "version": "20.6.3.0.33"}, {"status": "affected", "version": "20.9.2.0.01"}, {"status": "affected", "version": "20.9.1_LI_Images"}, {"status": "affected", "version": "20.10.1_LI_Images"}, {"status": "affected", "version": "20.9.2_LI_Images"}, {"status": "affected", "version": "20.3.7"}, {"status": "affected", "version": "20.9.3"}, {"status": "affected", "version": "20.6.5.1"}, {"status": "affected", "version": "20.11.1"}, {"status": "affected", "version": "20.11.1_LI_Images"}, {"status": "affected", "version": "20.9.3_LI_ Images"}, {"status": "affected", "version": "20.6.3.1.1"}, {"status": "affected", "version": "20.9.3.0.2"}, {"status": "affected", "version": "20.6.5.1.2"}, {"status": "affected", "version": "20.9.3.0.3"}, {"status": "affected", "version": "20.4.2.3"}, {"status": "affected", "version": "20.6.3.2"}, {"status": "affected", "version": "20.6.4.1"}, {"status": "affected", "version": "20.6.3.0.38"}, {"status": "affected", "version": "20.6.3.0.39"}, {"status": "affected", "version": "20.3.5.1"}, {"status": "affected", "version": "20.3.4.3"}, {"status": "affected", "version": "20.9.3.1"}, {"status": "affected", "version": "20.3.3.2"}, {"status": "affected", "version": "20.6.5.2"}, {"status": "affected", "version": "20.3.7.1"}, {"status": "affected", "version": "20.10.1.1"}, {"status": "affected", "version": "20.6.5.2.1"}, {"status": "affected", "version": "20.3.4.0.25"}, {"status": "affected", "version": "20.6.2.2.4"}, {"status": "affected", "version": "20.6.1.2"}, {"status": "affected", "version": "20.11.1.1"}, {"status": "affected", "version": "20.9.3.0.5"}, {"status": "affected", "version": "20.3.4.0.26"}, {"status": "affected", "version": "20.6.5.1.3"}, {"status": "affected", "version": "20.6.3.0.40"}, {"status": "affected", "version": "20.1.3.1"}, {"status": "affected", "version": "20.9.2.2"}, {"status": "affected", "version": "20.6.5.2.3"}, {"status": "affected", "version": "20.6.5.1.4"}, {"status": "affected", "version": "20.6.5.3"}, {"status": "affected", "version": "20.6.3.0.41"}, {"status": "affected", "version": "20.9.3.0.7"}, {"status": "affected", "version": "20.6.5.1.5"}, {"status": "affected", "version": "20.9.3.0.4"}, {"status": "affected", "version": "20.6.4.0.19"}, {"status": "affected", "version": "20.6.5.1.6"}, {"status": "affected", "version": "20.9.3.0.8"}, {"status": "affected", "version": "20.6.3.3"}, {"status": "affected", "version": "20.3.7.2"}, {"status": "affected", "version": "20.6.5.4"}, {"status": "affected", "version": "20.6.5.1.7"}, {"status": "affected", "version": "20.9.3.0.12"}, {"status": "affected", "version": "20.6.4.2"}, {"status": "affected", "version": "20.6.5.5"}, {"status": "affected", "version": "20.9.3.2"}, {"status": "affected", "version": "20.11.1.2"}, {"status": "affected", "version": "20.6.3.4"}, {"status": "affected", "version": "20.10.1.2"}, {"status": "affected", "version": "20.6.5.1.9"}, {"status": "affected", "version": "20.9.3.0.16"}, {"status": "affected", "version": "20.6.3.0.45"}, {"status": "affected", "version": "20.6.5.1.10"}, {"status": "affected", "version": "20.9.3.0.17"}, {"status": "affected", "version": "20.6.5.2.4"}, {"status": "affected", "version": "20.6.4.0.21"}, {"status": "affected", "version": "20.9.3.0.18"}, {"status": "affected", "version": "20.6.3.0.46"}, {"status": "affected", "version": "20.6.3.0.47"}, {"status": "affected", "version": "20.9.2.3"}, {"status": "affected", "version": "20.9.3.2_LI_Images"}, {"status": "affected", "version": "20.9.3.0.21"}, {"status": "affected", "version": "20.9.3.0.20"}, {"status": "affected", "version": "20.9.4_LI_Images"}, {"status": "affected", "version": "20.9.4"}, {"status": "affected", "version": "20.6.5.1.11"}, {"status": "affected", "version": "20.12.1"}, {"status": "affected", "version": "20.12.1_LI_Images"}, {"status": "affected", "version": "20.6.5.1.13"}, {"status": "affected", "version": "20.9.3.0.23"}, {"status": "affected", "version": "20.6.5.2.8"}, {"status": "affected", "version": "20.9.4.1"}, {"status": "affected", "version": "20.9.4.1_LI_Images"}, {"status": "affected", "version": "20.9.3.0.25"}, {"status": "affected", "version": "20.9.3.0.24"}, {"status": "affected", "version": "20.6.5.1.14"}, {"status": "affected", "version": "20.3.8"}, {"status": "affected", "version": "20.6.6"}, {"status": "affected", "version": "20.9.3.0.26"}, {"status": "affected", "version": "20.6.3.0.51"}, {"status": "affected", "version": "20.9.3.0.29"}, {"status": "affected", "version": "20.12.2"}, {"status": "affected", "version": "20.12.2_LI_Images"}, {"status": "affected", "version": "20.6.6.0.1"}, {"status": "affected", "version": "20.13.1_LI_Images"}, {"status": "affected", "version": "20.9.4.0.4"}, {"status": "affected", "version": "20.13.1"}, {"status": "affected", "version": "20.9.4.1.1"}, {"status": "affected", "version": "20.9.5"}, {"status": "affected", "version": "20.9.5_LI_Images"}, {"status": "affected", "version": "20.12.3_LI_Images"}, {"status": "affected", "version": "20.12.3"}, {"status": "affected", "version": "20.9.4.1.3"}, {"status": "affected", "version": "20.6.7"}, {"status": "affected", "version": "20.9.5.1"}, {"status": "affected", "version": "20.9.5.1_LI_Images"}, {"status": "affected", "version": "20.9.4.1.6"}, {"status": "affected", "version": "20.14.1"}, {"status": "affected", "version": "20.14.1_LI_Images"}, {"status": "affected", "version": "20.9.5.2"}, {"status": "affected", "version": "20.9.5.2.1"}, {"status": "affected", "version": "20.9.5.2_LI_Images"}, {"status": "affected", "version": "20.12.3.1"}, {"status": "affected", "version": "20.12.4"}, {"status": "affected", "version": "20.15.1_LI_Images"}, {"status": "affected", "version": "20.15.1"}, {"status": "affected", "version": "20.9.5.1.4"}, {"status": "affected", "version": "20.9.5.2.7"}, {"status": "affected", "version": "20.9.5.2.13"}, {"status": "affected", "version": "20.9.6"}, {"status": "affected", "version": "20.9.6_LI_Images"}, {"status": "affected", "version": "20.9.5.2.14"}, {"status": "affected", "version": "20.6.8"}, {"status": "affected", "version": "20.12.4.0.03"}, {"status": "affected", "version": "20.16.1"}, {"status": "affected", "version": "20.16.1_LI_Images"}, {"status": "affected", "version": "20.12.4_LI_Images"}, {"status": "affected", "version": "20.9.5.2.16"}, {"status": "affected", "version": "20.12.4.0.4"}, {"status": "affected", "version": "20.12.401"}, {"status": "affected", "version": "20.9.5.3"}, {"status": "affected", "version": "20.9.5.3_LI_Images"}, {"status": "affected", "version": "20.12.4.1_LI_Images"}, {"status": "affected", "version": "20.12.4.1"}, {"status": "affected", "version": "20.9.5.2.21"}, {"status": "affected", "version": "20.9.6.0.3"}, {"status": "affected", "version": "20.12.4.0.6"}, {"status": "affected", "version": "20.15.2_LI_Images"}, {"status": "affected", "version": "20.15.2"}, {"status": "affected", "version": "20.12.4_Monthly_ES5"}, {"status": "affected", "version": "20.12.5"}, {"status": "affected", "version": "20.12.5_LI_Images"}, {"status": "affected", "version": "20.9.7_LI _Images"}, {"status": "affected", "version": "20.9.7"}, {"status": "affected", "version": "20.15.3"}, {"status": "affected", "version": "20.15.3_ LI _Images"}, {"status": "affected", "version": "20.12.501"}, {"status": "affected", "version": "20.12.5.1_LI_Images"}, {"status": "affected", "version": "20.12.5.1"}, {"status": "affected", "version": "20.12.5.2_LI_Images"}, {"status": "affected", "version": "20.12.5.2"}, {"status": "affected", "version": "20.15.3.1"}, {"status": "affected", "version": "20.15.4_LI_Images"}, {"status": "affected", "version": "20.15.4"}, {"status": "affected", "version": "20.9.7.1_LI _Images"}, {"status": "affected", "version": "20.9.7.1"}, {"status": "affected", "version": "20.18.1"}, {"status": "affected", "version": "20.18.1_LI_Images"}, {"status": "affected", "version": "20.12.6_LI_Images"}, {"status": "affected", "version": "20.12.6"}, {"status": "affected", "version": "20.12.5.1.01"}, {"status": "affected", "version": "26.0.1"}, {"status": "affected", "version": "20.9.8"}, {"status": "affected", "version": "20.9.8_LI_Images"}, {"status": "affected", "version": "20.18.2"}, {"status": "affected", "version": "20.15.4.1_LI_Images"}, {"status": "affected", "version": "20.15.4.1"}, {"status": "affected", "version": "20.18.2_LI_Images"}, {"status": "affected", "version": "26.1.1"}, {"status": "affected", "version": "26.1.1_LI_Images"}, {"status": "affected", "version": "20.18.2.1_LI_Images"}, {"status": "affected", "version": "20.18.2.1"}, {"status": "affected", "version": "20.15.4.2_LI_Images"}, {"status": "affected", "version": "20.15.4.2"}, {"status": "affected", "version": "20.12.6.1"}, {"status": "affected", "version": "20.12.6.1_LI_Images"}, {"status": "affected", "version": "20.12.5.3"}, {"status": "affected", "version": "20.12.5.3_LI_Images"}, {"status": "affected", "version": "20.9.8.2_LI_Images"}, {"status": "affected", "version": "20.9.8.2"}, {"status": "affected", "version": "20.18.3"}, {"status": "affected", "version": "20.18.3_LI_Images"}, {"status": "affected", "version": "20.15.5"}, {"status": "affected", "version": "20.15.5_LI_Images"}, {"status": "affected", "version": "20.12.7"}, {"status": "affected", "version": "20.12.7_LI_Images"}, {"status": "affected", "version": "20.9.9"}, {"status": "affected", "version": "20.9.9_LI_Images"}, {"status": "affected", "version": "20.18.2.2"}, {"status": "affected", "version": "20.18.2.2_LI_Images"}, {"status": "affected", "version": "20.12.5.4"}, {"status": "affected", "version": "20.12.5.4_LI_ Images"}, {"status": "affected", "version": "20.12.7.1_LI_Images"}, {"status": "affected", "version": "20.12.6.2_LI_Images"}, {"status": "affected", "version": "20.12.7.1"}, {"status": "affected", "version": "20.15.5.1"}, {"status": "affected", "version": "20.15.4.3"}, {"status": "affected", "version": "20.15.4.3_LI_Images"}, {"status": "affected", "version": "20.15.5.1_LI_Images"}, {"status": "affected", "version": "20.12.6.2"}, {"status": "affected", "version": "20.15.5.2"}, {"status": "affected", "version": "20.15.5.2_LI_Images"}, {"status": "affected", "version": "26.1.1.1_LI_Images"}, {"status": "affected", "version": "20.15.4.4"}, {"status": "affected", "version": "20.15.4.4_LI_Images"}, {"status": "affected", "version": "26.1.1.1"}, {"status": "affected", "version": "20.9.9.1_LI_Images"}, {"status": "affected", "version": "20.9.9.1"}]product-7d14d24908e295d99b26952868bcdd8b679a703f05b4aac134d1f85c620f6f52Linked exactInspect raw assertions
cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 6
- Logic
- OR
- Version bounds
- from including 26.1; through excluding 26.1.1.1
- Match ID
c34c0ab2-3e8e-4b12-bea2-446f8f248b9a
cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.12.7:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 7
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
6a03bcef-dc25-488d-91d3-0a16f3b872e3
cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 0
- Logic
- OR
- Version bounds
- through excluding 20.9.9.1
- Match ID
5021d679-e23a-4d7f-b3b6-d664634a639c
cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 4
- Logic
- OR
- Version bounds
- from including 20.15.5; through excluding 20.15.5.2
- Match ID
709d0805-4b76-46a0-82d3-93c89926b389
cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 5
- Logic
- OR
- Version bounds
- from including 20.16; through excluding 20.18.2.2
- Match ID
bb6a9216-3d47-4b33-b502-72b99859992e
cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 2
- Logic
- OR
- Version bounds
- from including 20.12.6; through excluding 20.12.6.2
- Match ID
fda5ca36-86b6-443d-b772-37a5901f3e83
cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 3
- Logic
- OR
- Version bounds
- from including 20.13; through excluding 20.15.4.4
- Match ID
32a83687-b363-476b-89ef-b35c82575237
cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 1
- Logic
- OR
- Version bounds
- from including 20.10; through excluding 20.12.5.4
- Match ID
26022018-2273-4589-be4f-ad92da31cb58
product-93425b32f8b59a37b2b15ffd9112df06c7de54c9717d64f294043cca46c8bd91Linked exactInspect raw assertions
cpe:2.3:a:cisco:sd-wan_vsmart_controller:*:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 9
- Logic
- OR
- Version bounds
- from including 20.10; through excluding 20.12.5.4
- Match ID
86d90eaf-0eb3-4412-8d15-14f5151e36fa
cpe:2.3:a:cisco:sd-wan_vsmart_controller:*:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 12
- Logic
- OR
- Version bounds
- from including 20.15.5; through excluding 20.15.5.2
- Match ID
9e964df6-e2fb-4305-9ad6-42904fc4fe9a
cpe:2.3:a:cisco:sd-wan_vsmart_controller:*:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 11
- Logic
- OR
- Version bounds
- from including 20.13; through excluding 20.15.4.4
- Match ID
eec9b48c-3149-4662-9dd4-dc4ace4460e3
cpe:2.3:a:cisco:sd-wan_vsmart_controller:20.12.7:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 15
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
0f4fff4b-5c26-4014-a9b2-ee342f3fe3c8
cpe:2.3:a:cisco:sd-wan_vsmart_controller:*:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 14
- Logic
- OR
- Version bounds
- from including 26.1; through excluding 26.1.1.1
- Match ID
788140a2-0378-487e-9c9a-84080c9bc7a5
cpe:2.3:a:cisco:sd-wan_vsmart_controller:*:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 10
- Logic
- OR
- Version bounds
- from including 20.12.6; through excluding 20.12.6.2
- Match ID
caa36394-30a2-4668-af03-1c596d8ac2e0
cpe:2.3:a:cisco:sd-wan_vsmart_controller:*:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 8
- Logic
- OR
- Version bounds
- through excluding 20.9.9.1
- Match ID
0824ec8b-3153-4298-8570-c115a95fccf1
cpe:2.3:a:cisco:sd-wan_vsmart_controller:*:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Vulnerable target
- Configuration
- 0 · node/0 · match 13
- Logic
- OR
- Version bounds
- from including 20.16; through excluding 20.18.2.2
- Match ID
4d40d018-e4eb-4cc8-a2b0-f8e1da2e3350
Affected-product evidence
Accepted scope and product mapping
0 canonical links · 2 source-reported links
Canonical linkage remains open; the cited source assertion is retained below.
Vendor specified only by source · Product specified only by source
- Source class
- Direct cve affected
- Assertions
- 2
- Mapping revision
- cpe23-exact-mapping-v1
- Observed cutoff
- Aug 27, 2026
Retained assertion IDs
b3dbedad-e70b-4664-819b-0a1d39bbfca7e5e647de-4c19-4ea2-852b-ef2d57a74985Canonical linkage remains open; the cited source assertion is retained below.
Vendor specified only by source · Product specified only by source
- Source class
- Nvd cpe vulnerable target
- Assertions
- 16
- Mapping revision
- cpe23-exact-mapping-v1
- Observed cutoff
- Aug 27, 2026
Retained assertion IDs
097c424b-78d2-4c2d-8e7b-0fa896886c331e38f481-2770-4508-8607-3ef3147d40bd5d4a7cb4-c863-4487-bce5-8deaa0bd6906687d69ab-a070-4258-b0f2-f41bf1d37d4569fd54ce-28a1-45b3-bb28-908cfc39e20c7d99aa5f-ca52-47f5-b602-5d212b7ec4e08087e970-cfaf-4eaa-8b11-cd60c06a7d7e8a9a9c56-f65d-4ecb-a55c-a632be331e18b00d4f14-1aca-42fe-a407-6b6cf0409178bfd6ac73-b3f9-453d-bfe1-3eaba2cc940dc41166d9-b6fb-44b1-b257-f827cb16aa28d38a9675-3159-4e38-847b-71305b4b0672d46f2769-0172-4bbb-8ae0-4b14ad86f7d3ec03ffb2-d351-4def-9427-617df4cb3054f93a9255-f151-49b2-994d-987af7520b57fe5743a2-3b8d-4571-80f3-9d4397b7fb76Assessments
CVSS by origin
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HDirect CVE/CNA normalized decisions
cisco
CVSS 3.1 · Primary · Original assertion · rank 1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H- Validation
- Valid match
- Recomputed
- 7.8
- Decision reason
- Evidence supported
- Policy
- casca-direct-cvss-eligibility-v1
Assessments are retained side by side under closed precedence. Cascade never averages CVSS.
Evidence boundaries
- KEV membership is authoritative for the catalog, not proof of exposure in any environment.
- EPSS is a dated model probability and not an individual-environment prediction.
- Affected or fixed status applies only to the exact cited product and version scope; remaining scope stays source-scoped.
- NVD-carried upstream facts remain derivative; independent corroboration requires a separately authored source.
- Only NVD metrics validated under the generation-bound calculator are Public Priority eligible; direct CVE record metrics remain display-only.
- NVD CVSS source eligibility is closed: NVD-authored, exact record-source, or registered same-CVE container origin; unmapped sources remain display-only.
- Core replay supports the active and immediately prior generation; retrospective valid-at replay is deferred.
- OSV aggregation and OSV-converted NVD material are not independent corroboration.
- Red Hat facts are vendor assertions for the exact supplied products.
- Nonmembership and not-yet-observed states are not proof of safety.