CVE-2026-20122
Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability
Basic Information
- CVE State
- PUBLISHED
- Reserved Date
- October 08, 2025
- Published Date
- February 25, 2026
- Last Updated
- April 21, 2026
- Vendor
- Cisco
- Product
- Cisco Catalyst SD-WAN Manager
- Description
- A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite arbitrary files on the local file system. To exploit this vulnerability, the attacker must have valid read-only credentials with API access on the affected system. This vulnerability is due to improper file handling on the API interface of an affected system. An attacker could exploit this vulnerability by uploading a malicious file on the local file system. A successful exploit could allow the attacker to overwrite arbitrary files on the affected system and gain vmanage user privileges.
- Tags
- Exploitation
- active
- Technical Impact
- total
- Exploited in the Wild
- Yes (2026-06-01 13:22:22 UTC) Source
cisa
CVSS Scores
CVSS v3.1
5.4 - MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
SSVC Information
Exploit Status
Known Exploited Vulnerability Information
| Source | Added Date |
|---|---|
| CVE | 2026-06-01 13:22:22 UTC |
Timeline
-
CVE ID Reserved
-
CVE Published to Public
-
Added to KEVIntel