Product:
Cisco Catalyst SD-WAN Manager
Summary
A vulnerability in Cisco Catalyst SD-WAN Manager could allow an authenticated, local attacker with low privileges to gain root privileges on the underlying operating system. This vulnerability is due to an insufficient user authentication mechanism in the REST API. An attacker could exploit this vulnerability by sending a request to the REST API of the affected system.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.8 | CVE-2026-20126 |
Exploitation
To exploit this vulnerability, an attacker must be authenticated and have low privileges on the affected system. The attacker can send a specially crafted request to the REST API, which could allow them to bypass the insufficient authentication mechanism and gain root privileges on the underlying operating system.
Affected Products
- Cisco Catalyst SD-WAN Manager: Vulnerable due to insufficient user authentication in the REST API, allowing local attackers to escalate privileges.
Mitigation
To mitigate this vulnerability, it is recommended to implement stronger user authentication mechanisms for the REST API and regularly update the system to the latest security patches provided by Cisco.