Product by Cisco
Cisco Catalyst Sd-wan Controller
7 known vulnerabilities in Cisco Catalyst Sd-wan Controller (Cisco), 2 of them actively exploited (CISA KEV).
Key figures
7
Vulnerabilities
2
Actively exploited (KEV)
0
Used by ransomware
5
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-20182 | Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability In CISA KEValso in 4 other products | 10.0 | |
| Critical | CVE-2026-20245 | Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation Vulnerability In CISA KEValso in 3 other products | 7.8 | |
| Critical | CVE-2026-20310 | Cisco SD-WAN Software Security Hardening Release - Improper Link Resolution Before File Access | 9.1 | |
| Critical | CVE-2026-20303 | Cisco Catalyst SD-WAN Security Hardening Release - Input Validation Vulnerabilities | 9.9 | |
| Critical | CVE-2026-20304 | Cisco Catalyst SD-WAN Security Hardening Release - Access Control Vulnerabilities | 9.9 | |
| High | CVE-2026-20313 | Cisco Catalyst SD-WAN Security Hardening Release - Memory Corruption Vulnerabilities | 7.7 | |
| High | CVE-2026-20312 | Cisco Catalyst SD-WAN Security Hardening Release - Information Disclosure Vulnerabilities | 8.8 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 31sans-atrisk-mail,
- Cisco SD-WAN Zero-Day Exploited Months Before Patchingsecurityweek,
- Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited to Gain Root Accessthehackernews,
- Mandiant reveals how Cisco SD-WAN zero-day attacks gained root accessbleepingcomputer,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 23sans-atrisk-mail,
- CISA Adds Cisco, Chrome, and Arista Flaws to KEV Catalog Amid Active Exploitationthehackernews,