CVE-2026-20133

6.5

CVSS
Medium

PUBLISHED

A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on an affected...

1 day faster than CISA KEV

Exploited in the wild Remote Low complexity No user interaction

Vendor: Cisco
Product: Cisco Catalyst SD-WAN Manager
Published: Feb 25, 2026
EPSS: 2.0% · 84% pctl

Automate this intelligence with the Pro API

Everything on this page — CVSS, EPSS, exploit status, PoCs, scanner integrations, mentions, tags, and immediate honeypot data — is available programmatically for VM, SOC, and CTI workflows.

Learn about Pro

Description

A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system. This vulnerability is due to insufficient file system restrictions. An authenticated attacker with netadmin privileges could exploit this vulnerability by accessing the vshell of an affected system. A successful exploit could allow the attacker to read sensitive information on the underlying operating system.

cisa edge

Weaknesses (CWE)

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVSS scores

CVSS v3.1 6.5 Medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitation status

Exploited in the wild

Recorded 2026-06-01 13:22:22 UTC · CVE

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v

Known exploited vulnerability sources

Catalogues that list this CVE as a known exploited vulnerability.

Source	Added
CVE First	2026-06-01 13:22 UTC
CISA	2026-06-02 14:01 UTC

Vulnerability detail