Navigation
← Menace / CVE-2026-20133
CVE-2026-20133 Moyenne

Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability.

Cisco · Catalyst SD-WAN Manager

Exploitabilité (EPSS)
31.5 %
percentile mondial 98
Sévérité (CVSS)
6.5
CVSS v3.1
Ajoutée au KEV
20 avr. 2026
échéance CISA · 23 avr. 2026
Description

Cisco Catalyst SD-WAN Manager contains an exposure of sensitive information to an unauthorized actor vulnerability that could allow remote attackers to view sensitive information on affected systems.

Action requise (CISA)

Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.

Familles de faiblesses
CWE-200 · Exposition d’informations sensibles
Signal de priorisation (d’inspiration SSVC)
Examiner
Exploitation
Active (catalogue KEV)
Automatisable
Non
Impact technique
Partiel

Une orientation, pas une décision : le 4ᵉ facteur SSVC (impact mission/société) dépend du contexte de votre organisation. Méthode ↗

Autres vulnérabilités exploitées · Cisco
CVE-2021-1498 100% CVE-2020-3452 100% CVE-2021-1497 100% CVE-2018-0296 100% CVE-2019-1653 100% CVE-2023-20198 100%
NVD ↗ CVE.org ↗ CISA KEV ↗