cisco-sa-sdwan-mltvnps2-JxpWm7RCriticalCVSS 8.6

Cisco Catalyst SD-WAN Manager Vulnerabilities

Published
May 14, 2026
Last Modified
May 14, 2026

🔗 CVE IDs covered (3)

CVE-2026-20209 →CVE-2026-20210 →CVE-2026-20224 →

📋 Description

Multiple vulnerabilities in Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow a remote attacker to gain access to sensitive information, elevate privileges, or gain unauthorized access to the application.

For more information about these vulnerabilities, see the Details ["#details"] section of this advisory.

Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.

Cisco strongly recommends that customers upgrade to the fixed software indicated in this advisory.

CVE-2026-20209 — Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability (CVSS 3.1 5.4, CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) CVE-2026-20210 — Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability (CVSS 3.1 5.4, CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) CVE-2026-20224 — Cisco Catalyst SD-WAN Manager XML External Entity Injection Vulnerability (CVSS 3.1 8.6, CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N)

🎯 Affected products351

  • Cisco Catalyst SD-WAN Manager
  • Cisco Catalyst SD-WAN Manager 17.2.10
  • Cisco Catalyst SD-WAN Manager 17.2.4
  • Cisco Catalyst SD-WAN Manager 17.2.5
  • Cisco Catalyst SD-WAN Manager 17.2.6
  • Cisco Catalyst SD-WAN Manager 17.2.7
  • Cisco Catalyst SD-WAN Manager 17.2.8
  • Cisco Catalyst SD-WAN Manager 17.2.9
  • Cisco Catalyst SD-WAN Manager 18.2.0
  • Cisco Catalyst SD-WAN Manager 18.3.0
  • Cisco Catalyst SD-WAN Manager 18.3.1
  • Cisco Catalyst SD-WAN Manager 18.3.1.1
  • Cisco Catalyst SD-WAN Manager 18.3.3
  • Cisco Catalyst SD-WAN Manager 18.3.3.1
  • Cisco Catalyst SD-WAN Manager 18.3.4
  • Cisco Catalyst SD-WAN Manager 18.3.5
  • Cisco Catalyst SD-WAN Manager 18.3.6
  • Cisco Catalyst SD-WAN Manager 18.3.6.1
  • Cisco Catalyst SD-WAN Manager 18.3.7
  • Cisco Catalyst SD-WAN Manager 18.3.8
  • Cisco Catalyst SD-WAN Manager 18.4.0
  • Cisco Catalyst SD-WAN Manager 18.4.0.1
  • Cisco Catalyst SD-WAN Manager 18.4.1
  • Cisco Catalyst SD-WAN Manager 18.4.3
  • Cisco Catalyst SD-WAN Manager 18.4.302
  • Cisco Catalyst SD-WAN Manager 18.4.303
  • Cisco Catalyst SD-WAN Manager 18.4.4
  • Cisco Catalyst SD-WAN Manager 18.4.5
  • Cisco Catalyst SD-WAN Manager 18.4.501_ES
  • Cisco Catalyst SD-WAN Manager 18.4.6
  • +321 more not shown

✅ Remediation

Cisco has released software updates that address this vulnerability. https://software.cisco.com Workarounds: There are no workarounds that address these vulnerabilities.

🔗 References (10)