Product:
Cisco Catalyst SD-WAN Manager
Summary
A vulnerability in the API user authentication of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain access to an affected system as a user who has the netadmin role. The vulnerability is due to improper authentication for requests sent to the API. An attacker could exploit this vulnerability by sending a crafted request to the API of an affected system.
Details
| Severity | Base Score | CVE |
|---|---|---|
| CRITICAL | 9.8 | CVE-2026-20129 |
Exploitation
An attacker can exploit this vulnerability by sending a specially crafted request to the API of the affected Cisco Catalyst SD-WAN Manager. If successful, the attacker could execute commands with the privileges of the netadmin role, potentially compromising the system’s integrity and confidentiality.
Affected Products
- Cisco Catalyst SD-WAN Manager: Vulnerable versions prior to 20.18 allow unauthenticated access to the API.
Mitigation
To mitigate this vulnerability, users should upgrade to Cisco Catalyst SD-WAN Manager version 20.18 or later, which are not affected by this issue. Additionally, implementing proper access controls and monitoring API requests can help reduce the risk of exploitation.