Product by Cisco
Cisco SD-WAN vSmart Controller
7 known vulnerabilities in Cisco SD-WAN vSmart Controller (Cisco), 4 of them actively exploited (CISA KEV).
Key figures
7
Vulnerabilities
4
Actively exploited (KEV)
0
Used by ransomware
4
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-20182 | Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability In CISA KEValso in 4 other products | 10.0 | |
| Critical | CVE-2026-20127 | Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability In CISA KEValso in 3 other products | 10.0 | |
| Critical | CVE-2026-20245 | Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation Vulnerability In CISA KEValso in 3 other products | 7.8 | |
| Critical | CVE-2022-20775 | Cisco SD-WAN Software Privilege Escalation Vulnerability In CISA KEValso in 6 other products | 7.8 | |
| High | CVE-2022-20818 | Cisco SD-WAN Software Privilege Escalation Vulnerabilities | 7.8 | |
| Medium | CVE-2022-20930 | Cisco SD-WAN Software Arbitrary File Corruption Vulnerability | 6.7 | |
| High | CVE-2022-20850 | Cisco SD-WAN Arbitrary File Deletion Vulnerability | 5.5 |
News
- Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malwarebleepingcomputer,
- Cisco SD-WAN Zero-Day Exploited Months Before Patchingsecurityweek,
- Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited to Gain Root Accessthehackernews,
- Mandiant reveals how Cisco SD-WAN zero-day attacks gained root accessbleepingcomputer,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 23sans-atrisk-mail,
- CISA Adds Cisco, Chrome, and Arista Flaws to KEV Catalog Amid Active Exploitationthehackernews,