cisco-sa-vmanage-xss-ZqkhP9W9MediumCVSS 5.4

Cisco Catalyst SD-WAN Manager Cross-Site Scripting Vulnerability

Published
March 25, 2026
Last Modified
March 25, 2026

🔗 CVE IDs covered (1)

CVE-2026-20108 →

📋 Description

A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device.

This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by persuading a user of the web-based management interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.

Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

CVE-2026-20108 — Cisco Catalyst SD-WAN Manager Cross-Site Scripting Vulnerability (CVSS 3.1 5.4, CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)

🎯 Affected products51

  • Cisco Catalyst SD-WAN Manager
  • Cisco Catalyst SD-WAN Manager 20.12.1
  • Cisco Catalyst SD-WAN Manager 20.12.1_LI_Images
  • Cisco Catalyst SD-WAN Manager 20.12.2
  • Cisco Catalyst SD-WAN Manager 20.12.2_LI_Images
  • Cisco Catalyst SD-WAN Manager 20.12.3
  • Cisco Catalyst SD-WAN Manager 20.12.3.1
  • Cisco Catalyst SD-WAN Manager 20.12.3_LI_Images
  • Cisco Catalyst SD-WAN Manager 20.12.4
  • Cisco Catalyst SD-WAN Manager 20.12.4.0.03
  • Cisco Catalyst SD-WAN Manager 20.12.4.0.4
  • Cisco Catalyst SD-WAN Manager 20.12.4.0.6
  • Cisco Catalyst SD-WAN Manager 20.12.4.1
  • Cisco Catalyst SD-WAN Manager 20.12.4.1_LI_Images
  • Cisco Catalyst SD-WAN Manager 20.12.401
  • Cisco Catalyst SD-WAN Manager 20.12.4_LI_Images
  • Cisco Catalyst SD-WAN Manager 20.12.4_Monthly_ES5
  • Cisco Catalyst SD-WAN Manager 20.12.5
  • Cisco Catalyst SD-WAN Manager 20.12.5.1
  • Cisco Catalyst SD-WAN Manager 20.12.5.1.01
  • Cisco Catalyst SD-WAN Manager 20.12.5.1_LI_Images
  • Cisco Catalyst SD-WAN Manager 20.12.5.2
  • Cisco Catalyst SD-WAN Manager 20.12.5.2_LI_Images
  • Cisco Catalyst SD-WAN Manager 20.12.5.3
  • Cisco Catalyst SD-WAN Manager 20.12.5.3_LI_Images
  • Cisco Catalyst SD-WAN Manager 20.12.5_LI_Images
  • Cisco Catalyst SD-WAN Manager 20.12.6
  • Cisco Catalyst SD-WAN Manager 20.12.6.1
  • Cisco Catalyst SD-WAN Manager 20.12.6.1_LI_Images
  • Cisco Catalyst SD-WAN Manager 20.12.6_LI_Images
  • +21 more not shown

✅ Remediation

Cisco has released software updates that address this vulnerability. https://software.cisco.com Workarounds: There are no workarounds that address this vulnerability.

🔗 References (4)