← Back

CVE-2026-20128

nvd nist
Published: Feb 25, 2026Modified: Jun 17, 2026CISA KEV

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Exploitability: 0.8 / Impact: 6.0
Source: psirt@cisco.com (Secondary)

Description

A vulnerability in the Data Collection Agent (DCA) feature of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain DCA user privileges on an affected system. This vulnerability is due to the presence of a credential file for the DCA user on an affected system. An attacker could exploit this vulnerability by sending a crafted HTTP request and reading the file that contains the DCA password from that affected system. A successful exploit could allow the attacker to access another affected system and gain DCA user privileges. Note: Cisco Catalyst SD-WAN Manager releases 20.18 and later are not affected by this vulnerability.

Affected (5)

Cisco
1 product
Catalyst Sd Wan Manager
Configuration A
5 vulnerable
Vulnerable SoftwareAffected Versions
Cisco
Catalyst Sd Wan Manager
Before 20.9.8.2
Catalyst Sd Wan Manager
From 20.10 to 20.12.5.3
Catalyst Sd Wan Manager
From 20.13 to 20.15.4.2
Catalyst Sd Wan Manager
From 20.16 to 20.18
Catalyst Sd Wan Manager
Version 20.12.6

Related CWEs

CWE-257
Storing Passwords in a Recoverable Format
The storage of passwords in a recoverable format makes them subject to password reuse attacks by malicious users. In fact, it should be noted that recoverable encrypted passwords provide no significant benefit over plaintext passwords since they are subject not only to reuse by malicious attackers but also by malicious insiders. If a system administrator can recover a password directly, or use a brute force search on the available information, the administrator can use the password on other accounts.

References (2)

Source: psirt@cisco.com
Vendor Advisory
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
US Government Resource

Timeline

No history available yet.