CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (2026-10-19 05:00 UTC)

What this means for you

This week: 5,436 CVEs published, 358 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 5,436; Show in the list
Critical, last 7 days: 358; Show in the list
Healthcare-tagged, last 7 days: 4; Show in the list
Known exploited (CISA KEV): 1,747; Show in the list

Showing CVEs that name the product cisco:catalyst_sd-wan_manager. Show all products

15 CVEs, showing 1 to 15

CVE	Severity	Title	Published
CVE-2026-76504 Known exploited	Critical 9.8	Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability Assigned by cisco	Sep 30, 2026
CVE-2026-20262 Known exploited	Medium 6.5	Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability Assigned by cisco	Jun 15, 2026
CVE-2026-20245 Known exploited	High 7.8	Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation Vulnerability Assigned by cisco	Jun 4, 2026
CVE-2026-20224	High 8.6	A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenticated, remote attacker to read arbitrary files that are stored in an affected system.	May 14, 2026
CVE-2026-20210	Medium 5.4	A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker with read-only permissions to modify configurations and perform…	May 14, 2026
CVE-2026-20209	Medium 5.4	A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker with read-only permissions to elevate their privileges from low…	May 14, 2026
CVE-2026-20182 Known exploited	Critical 10.0	Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability Assigned by cisco	May 14, 2026
CVE-2026-20108	Medium 5.4	A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of t…	Mar 25, 2026
CVE-2026-20129	Critical 9.8	A vulnerability in the API user authentication of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain access to an affected system as a user who has the netadmi…	Feb 25, 2026
CVE-2026-20126	High 7.8	A vulnerability in Cisco Catalyst SD-WAN Manager could allow an authenticated, local attacker with low privileges to gain root privileges on the underlying operating system.	Feb 25, 2026
CVE-2026-20122 Known exploited	Medium 5.4	Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability Assigned by cisco	Feb 25, 2026
CVE-2026-20127 Known exploited	Critical 10.0	Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability Assigned by cisco	Feb 25, 2026
CVE-2026-20128 Known exploited	High 7.5	Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability Assigned by cisco	Feb 25, 2026
CVE-2026-20133 Known exploited	Medium 6.5	A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system. Assigned by cisco	Feb 25, 2026
CVE-2022-20775 Known exploited	High 7.8	Cisco SD-WAN Software Privilege Escalation Vulnerability Assigned by cisco	Sep 30, 2022

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.