← Back

CVE-2026-20133

nvd nist
Published: Feb 25, 2026Modified: Apr 22, 2026CISA KEV

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system. This vulnerability is due to insufficient file system restrictions. An authenticated attacker with netadmin privileges could exploit this vulnerability by accessing the vshell of an affected system. A successful exploit could allow the attacker to read sensitive information on the underlying operating system.

Affected (5)

Cisco
1 product
Catalyst Sd Wan Manager
Configuration A
5 vulnerable
Vulnerable SoftwareAffected Versions
Cisco
Catalyst Sd Wan Manager
Before 20.9.8.2
Catalyst Sd Wan Manager
From 20.10 to 20.12.5.3
Catalyst Sd Wan Manager
From 20.13 to 20.15.4.2
Catalyst Sd Wan Manager
From 20.16 to 20.18.2.1
Catalyst Sd Wan Manager
Version 20.12.6

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

Source: psirt@cisco.com
Vendor Advisory
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
US Government Resource

Timeline

No history available yet.