CVEvulnerability

CVE-2026-20209

5.4 MEDIUM Published 2026-05-14 Modified 2026-10-26 Official page ↗
Status
Analyzed
Published
2026-05-14
Last modified
2026-10-26
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Weaknesses
CWE-779

Description

A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker with read-only permissions to elevate their privileges from low to high and perform actions as a high-privileged user. This vulnerability exists because sensitive session information is recorded in audit logs. An attacker could exploit this vulnerability by elevating their read-only permissions in Cisco Catalyst SD-WAN Manager to those of a high-privileged user. A successful exploit could allow the attacker to perform actions as a high-privileged user.

Affected configurations

• cisco catalyst sd-wan manager (< 20.9.9.1) • cisco catalyst sd-wan manager (>= 20.10 < 20.12.5.4) • cisco catalyst sd-wan manager (>= 20.12.6 < 20.12.6.2) • cisco catalyst sd-wan manager (>= 20.13 < 20.15.4.4) • cisco catalyst sd-wan manager (>= 20.15.5 < 20.15.5.2) • cisco catalyst sd-wan manager (>= 20.16 < 20.18.2.2) • cisco catalyst sd-wan manager (>= 26.1 < 26.1.1.1) • cisco catalyst sd-wan manager 20.12.7

Related

Weakness · CWE (1)

  • CWE-779 Logging of Excessive Data weakness

References