Product by Cisco
Cisco SD-WAN Solution
28 known vulnerabilities in Cisco SD-WAN Solution (Cisco), 2 of them actively exploited (CISA KEV).
Key figures
28
Vulnerabilities
2
Actively exploited (KEV)
0
Used by ransomware
5
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-20262 | Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability In CISA KEValso in 2 other products | 6.5 | |
| Critical | CVE-2022-20775 | Cisco SD-WAN Software Privilege Escalation Vulnerability In CISA KEValso in 6 other products | 7.8 | |
| Critical | CVE-2020-3375 | Cisco SD-WAN Solution Software Buffer Overflow Vulnerability | 9.8 | |
| Medium | CVE-2020-27128 | Cisco SD-WAN vManage Software Arbitrary File Creation Vulnerability | 6.5 | |
| High | CVE-2019-1624 | Cisco SD-WAN Solution Command Injection Vulnerability | 8.8 | |
| High | CVE-2019-1650 | Cisco SD-WAN Solution Arbitrary File Overwrite Vulnerability | 8.8 | |
| Critical | CVE-2020-3374 | Cisco SD-WAN vManage Software Authorization Bypass Vulnerability | 9.9 | |
| Critical | CVE-2018-15387 | Cisco SD-WAN Solution Certificate Validation Bypass Vulnerability | 9.8 | |
| High | CVE-2023-20034 | Cisco SD-WAN vManage: Use of Hard-coded Credentials | 7.5 | |
| High | CVE-2019-1647 | Cisco SD-WAN Solution Unauthorized Access Vulnerability | 8.0 | |
| Medium | CVE-2021-1614 | Cisco SD-WAN Software Information Disclosure Vulnerability | 5.3 | |
| Medium | CVE-2021-1589 | Cisco SD-WAN vManage Software Disaster Recovery Feature Password Exposure Vulnerability | 6.5 | |
| High | CVE-2022-20818 | Cisco SD-WAN Software Privilege Escalation Vulnerabilities | 7.8 | |
| Medium | CVE-2022-20844 | Cisco SD-WAN: Use of Hard-coded Credentials | 5.3 | |
| Medium | CVE-2020-3536 | Cisco SD-WAN vManage Cross-Site Scripting Vulnerability | 6.4 | |
| High | CVE-2019-1646 | Privilege Escalation Vulnerability in Cisco SD-WAN Solution | 7.8 | |
| High | CVE-2019-1648 | Cisco SD-WAN Solution Privilege Escalation Vulnerability | 7.8 | |
| High | CVE-2020-3180 | Cisco SD-WAN Solution Software Static Credentials Vulnerability | 8.4 | |
| High | CVE-2020-3600 | Cisco SD-WAN Software Privilege Escalation Vulnerability | 7.8 | |
| High | CVE-2020-3595 | Cisco SD-WAN Software Privilege Escalation Vulnerability | 7.8 | |
| High | CVE-2020-3594 | Cisco SD-WAN Software Privilege Escalation Vulnerability | 7.8 | |
| High | CVE-2020-3593 | Cisco SD-WAN Software Privilege Escalation Vulnerability | 7.8 | |
| High | CVE-2022-20716 | Cisco SD-WAN Solution Improper Access Control Vulnerability | 7.8 | |
| Medium | CVE-2021-34726 | Cisco SD-WAN Software Command Injection Vulnerability | 6.7 | |
| High | CVE-2023-20113 | Cisco SD-WAN vManage Software Cross-Site Request Forgery Vulnerability | 6.5 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 24sans-atrisk-mail,
- Cisco Releases Security Updates for Actively Exploited SD-WAN Manager Flawthehackernews,
- Vulnérabilité dans Cisco Catalyst (16 juin 2026)cert-fr,
- Cisco fixes SD-WAN vManage flaw exploited in zero-day attacksbleepingcomputer,
- Recent KEV Additions: LiteSpeed cPanel Plugin, Cisco Catalyst SD-WAN Manager, and Splunk Enterprisesans-newsbites-mail,
- Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerabilitycisco-psirt