Product:
Cisco Catalyst SD-WAN Controller
Summary
A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller and Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected system. This vulnerability exists because the peering authentication mechanism is not functioning properly. An attacker could exploit this vulnerability by sending crafted requests to an affected system.
Details
| Severity | Base Score | CVE |
|---|---|---|
| CRITICAL | 10 | CVE-2026-20127 |
Exploitation
An attacker can exploit this vulnerability by sending specially crafted requests to the affected Cisco Catalyst SD-WAN Controller. If successful, the attacker could log in as a high-privileged, non-root user account, allowing access to NETCONF. This access would enable the attacker to manipulate network configurations for the SD-WAN fabric.
Affected Products
- Cisco Catalyst SD-WAN Controller: Affected by the vulnerability in peering authentication, allowing unauthorized access.
- Cisco Catalyst SD-WAN Manager: Also vulnerable, enabling similar exploitation as the Controller.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security patches provided by Cisco. Additionally, organizations should implement strict access controls and monitor network traffic for any suspicious activity related to the affected products.