{"history":[{"alert":0,"cve":"CVE-2026-20122","id":23207,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.25801, \"percentile\": 0.98001}"},{"alert":0,"cve":"CVE-2026-20122","id":20686,"kind":"epss","observed_at":1794327601,"payload":"{\"date\": \"2026-11-10\", \"epss\": 0.25801, \"percentile\": 0.97989}"},{"alert":0,"cve":"CVE-2026-20122","id":18686,"kind":"epss","observed_at":1794241201,"payload":"{\"date\": \"2026-11-09\", \"epss\": 0.25801, \"percentile\": 0.97987}"},{"alert":0,"cve":"CVE-2026-20122","id":16757,"kind":"epss","observed_at":1794154800,"payload":"{\"date\": \"2026-11-08\", \"epss\": 0.25801, \"percentile\": 0.97987}"},{"alert":0,"cve":"CVE-2026-20122","id":14735,"kind":"epss","observed_at":1794068402,"payload":"{\"date\": \"2026-11-07\", \"epss\": 0.25801, \"percentile\": 0.97986}"},{"alert":0,"cve":"CVE-2026-20122","id":12519,"kind":"epss","observed_at":1793982001,"payload":"{\"date\": \"2026-11-06\", \"epss\": 0.25801, \"percentile\": 0.97983}"},{"alert":0,"cve":"CVE-2026-20122","id":10503,"kind":"epss","observed_at":1793938800,"payload":"{\"date\": \"2026-11-05\", \"epss\": 0.25801, \"percentile\": 0.97982}"},{"alert":0,"cve":"CVE-2026-20122","id":8053,"kind":"epss","observed_at":1793809200,"payload":"{\"date\": \"2026-11-04\", \"epss\": 0.25801, \"percentile\": 0.97981}"},{"alert":0,"cve":"CVE-2026-20122","id":5832,"kind":"epss","observed_at":1793722800,"payload":"{\"date\": \"2026-11-03\", \"epss\": 0.25801, \"percentile\": 0.97977}"},{"alert":1,"cve":"CVE-2026-20122","id":3910,"kind":"cna","observed_at":1793701200,"payload":"{\"containers\": {\"adp\": [{\"metrics\": [{\"other\": {\"content\": {\"id\": \"CVE-2026-20122\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2026-03-05T00:00:00+00:00\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}, {\"other\": {\"content\": {\"dateAdded\": \"2026-04-20\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20122\"}, \"type\": \"kev\"}}], \"providerMetadata\": {\"dateUpdated\": \"2026-04-21T03:55:33.255Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"references\": [{\"tags\": [\"government-resource\"], \"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20122\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-04-20T00:00:00.000Z\", \"value\": \"CVE-2026-20122 added to CISA KEV\"}], \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"affected\": [{\"defaultStatus\": \"unknown\", \"product\": \"Cisco Catalyst SD-WAN Manager\", \"vendor\": \"Cisco\", \"versions\": [{\"status\": \"affected\", \"version\": \"20.1.12\"}, {\"status\": \"affected\", \"version\": \"19.2.1\"}, {\"status\": \"affected\", \"version\": \"18.4.4\"}, {\"status\": \"affected\", \"version\": \"18.4.5\"}, {\"status\": \"affected\", \"version\": \"20.1.1.1\"}, {\"status\": \"affected\", \"version\": \"20.1.1\"}, {\"status\": \"affected\", \"version\": \"19.3.0\"}, {\"status\": \"affected\", \"version\": \"19.2.2\"}, {\"status\": \"affected\", \"version\": \"19.2.099\"}, {\"status\": \"affected\", \"version\": \"18.3.6\"}, {\"status\": \"affected\", \"version\": \"18.3.7\"}, {\"status\": \"affected\", \"version\": \"19.2.0\"}, {\"status\": \"affected\", \"version\": \"18.3.8\"}, {\"status\": \"affected\", \"version\": \"19.0.0\"}, {\"status\": \"affected\", \"version\": \"19.1.0\"}, {\"status\": \"affected\", \"version\": \"18.4.302\"}, {\"status\": \"affected\", \"version\": \"18.4.303\"}, {\"status\": \"affected\", \"version\": \"19.2.097\"}, {\"status\": \"affected\", \"version\": \"19.2.098\"}, {\"status\": \"affected\", \"version\": \"17.2.10\"}, {\"status\": \"affected\", \"version\": \"18.3.6.1\"}, {\"status\": \"affected\", \"version\": \"19.0.1a\"}, {\"status\": \"affected\", \"version\": \"18.2.0\"}, {\"status\": \"affected\", \"version\": \"18.4.3\"}, {\"status\": \"affected\", \"version\": \"18.4.1\"}, {\"status\": \"affected\", \"version\": \"17.2.8\"}, {\"status\": \"affected\", \"version\": \"18.3.3.1\"}, {\"status\": \"affected\", \"version\": \"18.4.0\"}, {\"status\": \"affected\", \"version\": \"18.3.1\"}, {\"status\": \"affected\", \"version\": \"17.2.6\"}, {\"status\": \"affected\", \"version\": \"17.2.9\"}, {\"status\": \"affected\", \"version\": \"18.3.4\"}, {\"status\": \"affected\", \"version\": \"17.2.5\"}, {\"status\": \"affected\", \"version\": \"18.3.1.1\"}, {\"status\": \"affected\", \"version\": \"18.3.5\"}, {\"status\": \"affected\", \"version\": \"18.4.0.1\"}, {\"status\": \"affected\", \"version\": \"18.3.3\"}, {\"status\": \"affected\", \"version\": \"17.2.7\"}, {\"status\": \"affected\", \"version\": \"17.2.4\"}, {\"status\": \"affected\", \"version\": \"18.3.0\"}, {\"status\": \"affected\", \"version\": \"19.2.3\"}, {\"status\": \"affected\", \"version\": \"18.4.501_ES\"}, {\"status\": \"affected\", \"version\": \"20.3.1\"}, {\"status\": \"affected\", \"version\": \"20.1.2\"}, {\"status\": \"affected\", \"version\": \"19.2.929\"}, {\"status\": \"affected\", \"version\": \"19.2.31\"}, {\"status\": \"affected\", \"version\": \"20.3.2\"}, {\"status\": \"affected\", \"version\": \"19.2.32\"}, {\"status\": \"affected\", \"version\": \"20.3.2_925\"}, {\"status\": \"affected\", \"version\": \"20.3.2.1\"}, {\"status\": \"affected\", \"version\": \"20.3.2.1_927\"}, {\"status\": \"affected\", \"version\": \"18.4.6\"}, {\"status\": \"affected\", \"version\": \"20.1.2_937\"}, {\"status\": \"affected\", \"version\": \"20.4.1\"}, {\"status\": \"affected\", \"version\": \"20.3.2_928\"}, {\"status\": \"affected\", \"version\": \"20.3.2_929\"}, {\"status\": \"affected\", \"version\": \"20.4.1.0.1\"}, {\"status\": \"affected\", \"version\": \"20.3.2.1_930\"}, {\"status\": \"affected\", \"version\": \"19.2.4\"}, {\"status\": \"affected\", \"version\": \"20.5.0.1.1\"}, {\"status\": \"affected\", \"version\": \"20.4.1.1\"}, {\"status\": \"affected\", \"version\": \"20.3.3\"}, {\"status\": \"affected\", \"version\": \"19.2.4.0.1\"}, {\"status\": \"affected\", \"version\": \"20.3.2_937\"}, {\"status\": \"affected\", \"version\": \"20.3.3.1\"}, {\"status\": \"affected\", \"version\": \"20.5.1\"}, {\"status\": \"affected\", \"version\": \"20.1.3\"}, {\"status\": \"affected\", \"version\": \"20.3.3.0.4\"}, {\"status\": \"affected\", \"version\": \"20.3.3.1.2\"}, {\"status\": \"affected\", \"version\": \"20.3.3.1.1\"}, {\"status\": \"affected\", \"version\": \"20.4.1.2\"}, {\"status\": \"affected\", \"version\": \"20.3.3.0.2\"}, {\"status\": \"affected\", \"version\": \"20.4.1.1.5\"}, {\"status\": \"affected\", \"version\": \"20.4.1.0.01\"}, {\"status\": \"affected\", \"version\": \"20.4.1.0.02\"}, {\"status\": \"affected\", \"version\": \"20.3.3.1.7\"}, {\"status\": \"affected\", \"version\": \"20.3.3.1.5\"}, {\"status\": \"affected\", \"version\": \"20.5.1.0.1\"}, {\"status\": \"affected\", \"version\": \"20.3.3.1.10\"}, {\"status\": \"affected\", \"version\": \"20.3.3.0.8\"}, {\"status\": \"affected\", \"version\": \"20.4.2\"}, {\"status\": \"affected\", \"version\": \"20.4.2.0.1\"}, {\"status\": \"affected\", \"version\": \"20.3.4\"}, {\"status\": \"affected\", \"version\": \"20.3.3.0.14\"}, {\"status\": \"affected\", \"version\": \"19.2.4.0.8\"}, {\"status\": \"affected\", \"version\": \"19.2.4.0.9\"}, {\"status\": \"affected\", \"version\": \"20.3.4.0.1\"}, {\"status\": \"affected\", \"version\": \"20.3.2.0.5\"}, {\"status\": \"affected\", \"version\": \"20.6.1\"}, {\"status\": \"affected\", \"version\": \"20.5.1.0.2\"}, {\"status\": \"affected\", \"version\": \"20.3.3.0.17\"}, {\"status\": \"affected\", \"version\": \"20.6.1.1\"}, {\"status\": \"affected\", \"version\": \"20.6.0.18.3\"}, {\"status\": \"affected\", \"version\": \"20.3.2.0.6\"}, {\"status\": \"affected\", \"version\": \"20.6.0.18.4\"}, {\"status\": \"affected\", \"version\": \"20.4.2.0.2\"}, {\"status\": \"affected\", \"version\": \"20.3.3.0.16\"}, {\"status\": \"affected\", \"version\": \"20.3.4.0.5\"}, {\"status\": \"affected\", \"version\": \"20.6.1.0.1\"}, {\"status\": \"affected\", \"version\": \"20.3.4.0.6\"}, {\"status\": \"affected\", \"version\": \"20.6.2\"}, {\"status\": \"affected\", \"version\": \"20.7.1EFT2\"}, {\"status\": \"affected\", \"version\": \"20.3.4.0.9\"}, {\"status\": \"affected\", \"version\": \"20.3.4.0.11\"}, {\"status\": \"affected\", \"version\": \"20.4.2.0.4\"}, {\"status\": \"affected\", \"version\": \"20.3.3.0.18\"}, {\"status\": \"affected\", \"version\": \"20.7.1\"}, {\"status\": \"affected\", \"version\": \"20.6.2.1\"}, {\"status\": \"affected\", \"version\": \"20.3.4.1\"}, {\"status\": \"affected\", \"version\": \"20.5.1.1\"}, {\"status\": \"affected\", \"version\": \"20.4.2.1\"}, {\"status\": \"affected\", \"version\": \"20.4.2.1.1\"}, {\"status\": \"affected\", \"version\": \"20.3.4.1.1\"}, {\"status\": \"affected\", \"version\": \"20.3.813\"}, {\"status\": \"affected\", \"version\": \"20.3.4.0.19\"}, {\"status\": \"affected\", \"version\": \"20.4.2.2.1\"}, {\"status\": \"affected\", \"version\": \"20.5.1.2\"}, {\"status\": \"affected\", \"version\": \"20.3.4.2\"}, {\"status\": \"affected\", \"version\": \"20.3.814\"}, {\"status\": \"affected\", \"version\": \"20.4.2.2\"}, {\"status\": \"affected\", \"version\": \"20.6.2.2\"}, {\"status\": \"affected\", \"version\": \"20.3.4.2.1\"}, {\"status\": \"affected\", \"version\": \"20.7.1.1\"}, {\"status\": \"affected\", \"version\": \"20.3.4.1.2\"}, {\"status\": \"affected\", \"version\": \"20.6.2.2.2\"}, {\"status\": \"affected\", \"version\": \"20.3.4.0.20\"}, {\"status\": \"affected\", \"version\": \"20.6.2.2.3\"}, {\"status\": \"affected\", \"version\": \"20.4.2.2.2\"}, {\"status\": \"affected\", \"version\": \"20.3.5\"}, {\"status\": \"affected\", \"version\": \"20.6.2.0.4\"}, {\"status\": \"affected\", \"version\": \"20.4.2.2.3\"}, {\"status\": \"affected\", \"version\": \"20.3.4.0.24\"}, {\"status\": \"affected\", \"version\": \"20.6.2.2.7\"}, {\"status\": \"affected\", \"version\": \"20.6.3\"}, {\"status\": \"affected\", \"version\": \"20.3.4.2.2\"}, {\"status\": \"affected\", \"version\": \"20.4.2.2.4\"}, {\"status\": \"affected\", \"version\": \"20.7.1.0.2\"}, {\"status\": \"affected\", \"version\": \"20.8.1\"}, {\"status\": \"affected\", \"version\": \"20.3.5.0.8\"}, {\"status\": \"affected\", \"version\": \"20.3.5.0.9\"}, {\"status\": \"affected\", \"version\": \"20.4.2.2.8\"}, {\"status\": \"affected\", \"version\": \"20.3.5.0.7\"}, {\"status\": \"affected\", \"version\": \"20.6.3.0.7\"}, {\"status\": \"affected\", \"version\": \"20.6.3.0.5\"}, {\"status\": \"affected\", \"version\": \"20.6.3.0.10\"}, {\"status\": \"affected\", \"version\": \"20.6.3.0.2\"}, {\"status\": \"affected\", \"version\": \"20.7.2\"}, {\"status\": \"affected\", \"version\": \"20.9.1EFT2\"}, {\"status\": \"affected\", \"version\": \"20.6.3.0.11\"}, {\"status\": \"affected\", \"version\": \"20.6.3.1\"}, {\"status\": \"affected\", \"version\": \"20.6.3.0.14\"}, {\"status\": \"affected\", \"version\": \"20.6.4\"}, {\"status\": \"affected\", \"version\": \"20.9.1\"}, {\"status\": \"affected\", \"version\": \"20.6.3.0.19\"}, {\"status\": \"affected\", \"version\": \"20.6.3.0.18\"}, {\"status\": \"affected\", \"version\": \"20.3.6\"}, {\"status\": \"affected\", \"version\": \"20.9.1.1\"}, {\"status\": \"affected\", \"version\": \"20.6.3.0.23\"}, {\"status\": \"affected\", \"version\": \"20.6.4.0.4\"}, {\"status\": \"affected\", \"version\": \"20.6.3.0.25\"}, {\"status\": \"affected\", \"version\": \"20.6.5\"}, {\"status\": \"affected\", \"version\": \"20.6.3.0.27\"}, {\"status\": \"affected\", \"version\": \"20.9.2\"}, {\"status\": \"affected\", \"version\": \"20.9.2.1\"}, {\"status\": \"affected\", \"version\": \"20.6.3.0.29\"}, {\"status\": \"affected\", \"version\": \"20.6.3.0.31\"}, {\"status\": \"affected\", \"version\": \"20.6.3.0.32\"}, {\"status\": \"affected\", \"version\": \"20.10.1\"}, {\"status\": \"affected\", \"version\": \"20.6.3.0.33\"}, {\"status\": \"affected\", \"version\": \"20.9.2.0.01\"}, {\"status\": \"affected\", \"version\": \"20.9.1_LI_Images\"}, {\"status\": \"affected\", \"version\": \"20.10.1_LI_Images\"}, {\"status\": \"affected\", \"version\": \"20.9.2_LI_Images\"}, {\"status\": \"affected\", \"version\": \"20.3.7\"}, {\"status\": \"affected\", \"version\": \"20.9.3\"}, {\"status\": \"affected\", \"version\": \"20.6.5.1\"}, {\"status\": \"affected\", \"version\": \"20.11.1\"}, {\"status\": \"affected\", \"version\": \"20.11.1_LI_Images\"}, {\"status\": \"affected\", \"version\": \"20.9.3_LI_ Images\"}, {\"status\": \"affected\", \"version\": \"20.6.3.1.1\"}, {\"status\": \"affected\", \"version\": \"20.9.3.0.2\"}, {\"status\": \"affected\", \"version\": \"20.6.5.1.2\"}, {\"status\": \"affected\", \"version\": \"20.9.3.0.3\"}, {\"status\": \"affected\", \"version\": \"20.4.2.3\"}, {\"status\": \"affected\", \"version\": \"20.6.3.2\"}, {\"status\": \"affected\", \"version\": \"20.6.4.1\"}, {\"status\": \"affected\", \"version\": \"20.6.3.0.38\"}, {\"status\": \"affected\", \"version\": \"20.6.3.0.39\"}, {\"status\": \"affected\", \"version\": \"20.3.5.1\"}, {\"status\": \"affected\", \"version\": \"20.3.4.3\"}, {\"status\": \"affected\", \"version\": \"20.9.3.1\"}, {\"status\": \"affected\", \"version\": \"20.3.3.2\"}, {\"status\": \"affected\", \"version\": \"20.6.5.2\"}, {\"status\": \"affected\", \"version\": \"20.3.7.1\"}, {\"status\": \"affected\", \"version\": \"20.10.1.1\"}, {\"status\": \"affected\", \"version\": \"20.6.5.2.1\"}, {\"status\": \"affected\", \"version\": \"20.3.4.0.25\"}, {\"status\": \"affected\", \"version\": \"20.6.2.2.4\"}, {\"status\": \"affected\", \"version\": \"20.6.1.2\"}, {\"status\": \"affected\", \"version\": \"20.11.1.1\"}, {\"status\": \"affected\", \"version\": \"20.9.3.0.5\"}, {\"status\": \"affected\", \"version\": \"20.3.4.0.26\"}, {\"status\": \"affected\", \"version\": \"20.6.5.1.3\"}, {\"status\": \"affected\", \"version\": \"20.6.3.0.40\"}, {\"status\": \"affected\", \"version\": \"20.1.3.1\"}, {\"status\": \"affected\", \"version\": \"20.9.2.2\"}, {\"status\": \"affected\", \"version\": \"20.6.5.2.3\"}, {\"status\": \"affected\", \"version\": \"20.6.5.1.4\"}, {\"status\": \"affected\", \"version\": \"20.6.5.3\"}, {\"status\": \"affected\", \"version\": \"20.6.3.0.41\"}, {\"status\": \"affected\", \"version\": \"20.9.3.0.7\"}, {\"status\": \"affected\", \"version\": \"20.6.5.1.5\"}, {\"status\": \"affected\", \"version\": \"20.9.3.0.4\"}, {\"status\": \"affected\", \"version\": \"20.6.4.0.19\"}, {\"status\": \"affected\", \"version\": \"20.6.5.1.6\"}, {\"status\": \"affected\", \"version\": \"20.9.3.0.8\"}, {\"status\": \"affected\", \"version\": \"20.6.3.3\"}, {\"status\": \"affected\", \"version\": \"20.3.7.2\"}, {\"status\": \"affected\", \"version\": \"20.6.5.4\"}, {\"status\": \"affected\", \"version\": \"20.6.5.1.7\"}, {\"status\": \"affected\", \"version\": \"20.9.3.0.12\"}, {\"status\": \"affected\", \"version\": \"20.6.4.2\"}, {\"status\": \"affected\", \"version\": \"20.6.5.5\"}, {\"status\": \"affected\", \"version\": \"20.9.3.2\"}, {\"status\": \"affected\", \"version\": \"20.11.1.2\"}, {\"status\": \"affected\", \"version\": \"20.6.3.4\"}, {\"status\": \"affected\", \"version\": \"20.10.1.2\"}, {\"status\": \"affected\", \"version\": \"20.6.5.1.9\"}, {\"status\": \"affected\", \"version\": \"20.9.3.0.16\"}, {\"status\": \"affected\", \"version\": \"20.6.3.0.45\"}, {\"status\": \"affected\", \"version\": \"20.6.5.1.10\"}, {\"status\": \"affected\", \"version\": \"20.9.3.0.17\"}, {\"status\": \"affected\", \"version\": \"20.6.5.2.4\"}, {\"status\": \"affected\", \"version\": \"20.6.4.0.21\"}, {\"status\": \"affected\", \"version\": \"20.9.3.0.18\"}, {\"status\": \"affected\", \"version\": \"20.6.3.0.46\"}, {\"status\": \"affected\", \"version\": \"20.6.3.0.47\"}, {\"status\": \"affected\", \"version\": \"20.9.2.3\"}, {\"status\": \"affected\", \"version\": \"20.9.3.2_LI_Images\"}, {\"status\": \"affected\", \"version\": \"20.9.3.0.21\"}, {\"status\": \"affected\", \"version\": \"20.9.3.0.20\"}, {\"status\": \"affected\", \"version\": \"20.9.4_LI_Images\"}, {\"status\": \"affected\", \"version\": \"20.9.4\"}, {\"status\": \"affected\", \"version\": \"20.6.5.1.11\"}, {\"status\": \"affected\", \"version\": \"20.12.1\"}, {\"status\": \"affected\", \"version\": \"20.12.1_LI_Images\"}, {\"status\": \"affected\", \"version\": \"20.6.5.1.13\"}, {\"status\": \"affected\", \"version\": \"20.9.3.0.23\"}, {\"status\": \"affected\", \"version\": \"20.6.5.2.8\"}, {\"status\": \"affected\", \"version\": \"20.9.4.1\"}, {\"status\": \"affected\", \"version\": \"20.9.4.1_LI_Images\"}, {\"status\": \"affected\", \"version\": \"20.9.3.0.25\"}, {\"status\": \"affected\", \"version\": \"20.9.3.0.24\"}, {\"status\": \"affected\", \"version\": \"20.6.5.1.14\"}, {\"status\": \"affected\", \"version\": \"20.3.8\"}, {\"status\": \"affected\", \"version\": \"20.6.6\"}, {\"status\": \"affected\", \"version\": \"20.9.3.0.26\"}, {\"status\": \"affected\", \"version\": \"20.6.3.0.51\"}, {\"status\": \"affected\", \"version\": \"20.9.3.0.29\"}, {\"status\": \"affected\", \"version\": \"20.12.2\"}, {\"status\": \"affected\", \"version\": \"20.12.2_LI_Images\"}, {\"status\": \"affected\", \"version\": \"20.6.6.0.1\"}, {\"status\": \"affected\", \"version\": \"20.13.1_LI_Images\"}, {\"status\": \"affected\", \"version\": \"20.9.4.0.4\"}, {\"status\": \"affected\", \"version\": \"20.13.1\"}, {\"status\": \"affected\", \"version\": \"20.9.4.1.1\"}, {\"status\": \"affected\", \"version\": \"20.9.5\"}, {\"status\": \"affected\", \"version\": \"20.9.5_LI_Images\"}, {\"status\": \"affected\", \"version\": \"20.12.3_LI_Images\"}, {\"status\": \"affected\", \"version\": \"20.12.3\"}, {\"status\": \"affected\", \"version\": \"20.9.4.1.3\"}, {\"status\": \"affected\", \"version\": \"20.6.7\"}, {\"status\": \"affected\", \"version\": \"20.9.5.1\"}, {\"status\": \"affected\", \"version\": \"20.9.5.1_LI_Images\"}, {\"status\": \"affected\", \"version\": \"20.9.4.1.6\"}, {\"status\": \"affected\", \"version\": \"20.14.1\"}, {\"status\": \"affected\", \"version\": \"20.14.1_LI_Images\"}, {\"status\": \"affected\", \"version\": \"20.9.5.2\"}, {\"status\": \"affected\", \"version\": \"20.9.5.2.1\"}, {\"status\": \"affected\", \"version\": \"20.9.5.2_LI_Images\"}, {\"status\": \"affected\", \"version\": \"20.12.3.1\"}, {\"status\": \"affected\", \"version\": \"20.12.4\"}, {\"status\": \"affected\", \"version\": \"20.15.1_LI_Images\"}, {\"status\": \"affected\", \"version\": \"20.15.1\"}, {\"status\": \"affected\", \"version\": \"20.9.5.1.4\"}, {\"status\": \"affected\", \"version\": \"20.9.5.2.7\"}, {\"status\": \"affected\", \"version\": \"20.9.5.2.13\"}, {\"status\": \"affected\", \"version\": \"20.9.6\"}, {\"status\": \"affected\", \"version\": \"20.9.6_LI_Images\"}, {\"status\": \"affected\", \"version\": \"20.9.5.2.14\"}, {\"status\": \"affected\", \"version\": \"20.6.8\"}, {\"status\": \"affected\", \"version\": \"20.12.4.0.03\"}, {\"status\": \"affected\", \"version\": \"20.16.1\"}, {\"status\": \"affected\", \"version\": \"20.16.1_LI_Images\"}, {\"status\": \"affected\", \"version\": \"20.12.4_LI_Images\"}, {\"status\": \"affected\", \"version\": \"20.9.5.2.16\"}, {\"status\": \"affected\", \"version\": \"20.12.4.0.4\"}, {\"status\": \"affected\", \"version\": \"20.12.401\"}, {\"status\": \"affected\", \"version\": \"20.9.5.3\"}, {\"status\": \"affected\", \"version\": \"20.9.5.3_LI_Images\"}, {\"status\": \"affected\", \"version\": \"20.12.4.1_LI_Images\"}, {\"status\": \"affected\", \"version\": \"20.12.4.1\"}, {\"status\": \"affected\", \"version\": \"20.9.5.2.21\"}, {\"status\": \"affected\", \"version\": \"20.9.6.0.3\"}, {\"status\": \"affected\", \"version\": \"20.12.4.0.6\"}, {\"status\": \"affected\", \"version\": \"20.15.2_LI_Images\"}, {\"status\": \"affected\", \"version\": \"20.15.2\"}, {\"status\": \"affected\", \"version\": \"20.12.4_Monthly_ES5\"}, {\"status\": \"affected\", \"version\": \"20.12.5\"}, {\"status\": \"affected\", \"version\": \"20.12.5_LI_Images\"}, {\"status\": \"affected\", \"version\": \"20.9.7_LI _Images\"}, {\"status\": \"affected\", \"version\": \"20.9.7\"}, {\"status\": \"affected\", \"version\": \"20.15.3\"}, {\"status\": \"affected\", \"version\": \"20.15.3_ LI _Images\"}, {\"status\": \"affected\", \"version\": \"20.12.501\"}, {\"status\": \"affected\", \"version\": \"20.12.5.1_LI_Images\"}, {\"status\": \"affected\", \"version\": \"20.12.5.1\"}, {\"status\": \"affected\", \"version\": \"20.12.5.2_LI_Images\"}, {\"status\": \"affected\", \"version\": \"20.12.5.2\"}, {\"status\": \"affected\", \"version\": \"20.15.3.1\"}, {\"status\": \"affected\", \"version\": \"20.15.4_LI_Images\"}, {\"status\": \"affected\", \"version\": \"20.15.4\"}, {\"status\": \"affected\", \"version\": \"20.9.7.1_LI _Images\"}, {\"status\": \"affected\", \"version\": \"20.9.7.1\"}, {\"status\": \"affected\", \"version\": \"20.18.1\"}, {\"status\": \"affected\", \"version\": \"20.18.1_LI_Images\"}, {\"status\": \"affected\", \"version\": \"20.12.6_LI_Images\"}, {\"status\": \"affected\", \"version\": \"20.12.6\"}, {\"status\": \"affected\", \"version\": \"20.12.5.1.01\"}, {\"status\": \"affected\", \"version\": \"20.9.8\"}, {\"status\": \"affected\", \"version\": \"20.9.8_LI_Images\"}, {\"status\": \"affected\", \"version\": \"20.18.2\"}, {\"status\": \"affected\", \"version\": \"20.15.4.1_LI_Images\"}, {\"status\": \"affected\", \"version\": \"20.15.4.1\"}, {\"status\": \"affected\", \"version\": \"20.18.2_LI_Images\"}]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite arbitrary files on the local file system. To exploit this vulnerability, the attacker must have valid read-only credentials with API access on the affected system.\\r\\n\\r\\nThis vulnerability is due to improper file handling on the API interface of an affected system. An attacker could exploit this vulnerability by uploading a malicious file on the local file system. A successful exploit could allow the attacker to overwrite arbitrary files on the affected system and gain vmanage user privileges.\"}], \"exploits\": [{\"lang\": \"en\", \"value\": \"The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in CVE-2026-20133, CVE-2026-20126, and CVE-2026-20129.\\r\\n\\r\\nIn March 2026, the Cisco PSIRT became aware of active exploitation of the vulnerabilities that are described in CVE-2026-20128 and CVE-2026-20122 only. The vulnerabilities that are described in the other CVEs in this advisory are not known to have been compromised. Cisco strongly recommends that customers upgrade to a fixed software release to remediate these vulnerabilities.\"}], \"metrics\": [{\"cvssV3_1\": {\"attackComplexity\": \"LOW\", \"attackVector\": \"NETWORK\", \"availabilityImpact\": \"NONE\", \"baseScore\": 5.4, \"baseSeverity\": \"MEDIUM\", \"confidentialityImpact\": \"LOW\", \"integrityImpact\": \"LOW\", \"privilegesRequired\": \"LOW\", \"scope\": \"UNCHANGED\", \"userInteraction\": \"NONE\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N\", \"version\": \"3.1\"}, \"format\": \"cvssV3_1\"}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-648\", \"description\": \"Incorrect Use of Privileged APIs\", \"lang\": \"en\", \"type\": \"cwe\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2026-03-20T21:47:05.503Z\", \"orgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"shortName\": \"cisco\"}, \"references\": [{\"name\": \"cisco-sa-sdwan-authbp-qwCX8D4v\", \"url\": \"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v\"}], \"source\": {\"advisory\": \"cisco-sa-sdwan-authbp-qwCX8D4v\", \"defects\": [\"CSCws33584\"], \"discovery\": \"INTERNAL\"}, \"title\": \"Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability\"}}, \"cveMetadata\": {\"assignerOrgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"assignerShortName\": \"cisco\", \"cveId\": \"CVE-2026-20122\", \"datePublished\": \"2026-02-25T16:14:21.256Z\", \"dateReserved\": \"2025-10-08T11:59:15.377Z\", \"dateUpdated\": \"2026-04-21T03:55:33.255Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.2\"}"},{"alert":0,"cve":"CVE-2026-20122","id":3508,"kind":"epss","observed_at":1793665375,"payload":"{\"date\": \"2026-11-02\", \"epss\": 0.25801, \"percentile\": 0.97975}"},{"alert":1,"cve":"CVE-2026-20122","id":190,"kind":"kev","observed_at":1793665375,"payload":"{\"cveID\": \"CVE-2026-20122\", \"cwes\": [\"CWE-648\"], \"dateAdded\": \"2026-04-20\", \"dueDate\": \"2026-04-23\", \"forensicTriage\": \"No\", \"knownRansomwareCampaignUse\": \"Unknown\", \"notes\": \"CISA Mitigation Instructions: https://www.cisa.gov/news-events/directives/ed-26-03-mitigate-vulnerabilities-cisco-sd-wan-systems ; https://www.cisa.gov/news-events/directives/supplemental-direction-ed-26-03-hunt-and-hardening-guidance-cisco-sd-wan-systems ; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v ; https://nvd.nist.gov/vuln/detail/CVE-2026-20122\", \"product\": \"Catalyst SD-WAN Manger\", \"requiredAction\": \"Please adhere to CISA\\u2019s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA\\u2019s Emergency Directive 26-03 (URL listed below in Notes) and CISA\\u2019s \\u201cHunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.\", \"shortDescription\": \"Cisco Catalyst SD-WAN Manager contains an incorrect use of privileged APIs vulnerability due to improper file handling on the API interface of an affected system. An attacker could exploit this vulnerability by uploading a malicious file on the local file system. A successful exploit could allow the attacker to overwrite arbitrary files on the affected system and gain vmanage user privileges.\", \"vendorProject\": \"Cisco\", \"vulnerabilityName\": \"Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability\"}"}],"record":{"affected":[{"defaultStatus":"unknown","product":"Cisco Catalyst SD-WAN Manager","vendor":"Cisco","versions":[{"status":"affected","version":"20.1.12"},{"status":"affected","version":"19.2.1"},{"status":"affected","version":"18.4.4"},{"status":"affected","version":"18.4.5"},{"status":"affected","version":"20.1.1.1"},{"status":"affected","version":"20.1.1"},{"status":"affected","version":"19.3.0"},{"status":"affected","version":"19.2.2"},{"status":"affected","version":"19.2.099"},{"status":"affected","version":"18.3.6"},{"status":"affected","version":"18.3.7"},{"status":"affected","version":"19.2.0"},{"status":"affected","version":"18.3.8"},{"status":"affected","version":"19.0.0"},{"status":"affected","version":"19.1.0"},{"status":"affected","version":"18.4.302"},{"status":"affected","version":"18.4.303"},{"status":"affected","version":"19.2.097"},{"status":"affected","version":"19.2.098"},{"status":"affected","version":"17.2.10"},{"status":"affected","version":"18.3.6.1"},{"status":"affected","version":"19.0.1a"},{"status":"affected","version":"18.2.0"},{"status":"affected","version":"18.4.3"},{"status":"affected","version":"18.4.1"},{"status":"affected","version":"17.2.8"},{"status":"affected","version":"18.3.3.1"},{"status":"affected","version":"18.4.0"},{"status":"affected","version":"18.3.1"},{"status":"affected","version":"17.2.6"},{"status":"affected","version":"17.2.9"},{"status":"affected","version":"18.3.4"},{"status":"affected","version":"17.2.5"},{"status":"affected","version":"18.3.1.1"},{"status":"affected","version":"18.3.5"},{"status":"affected","version":"18.4.0.1"},{"status":"affected","version":"18.3.3"},{"status":"affected","version":"17.2.7"},{"status":"affected","version":"17.2.4"},{"status":"affected","version":"18.3.0"},{"status":"affected","version":"19.2.3"},{"status":"affected","version":"18.4.501_ES"},{"status":"affected","version":"20.3.1"},{"status":"affected","version":"20.1.2"},{"status":"affected","version":"19.2.929"},{"status":"affected","version":"19.2.31"},{"status":"affected","version":"20.3.2"},{"status":"affected","version":"19.2.32"},{"status":"affected","version":"20.3.2_925"},{"status":"affected","version":"20.3.2.1"},{"status":"affected","version":"20.3.2.1_927"},{"status":"affected","version":"18.4.6"},{"status":"affected","version":"20.1.2_937"},{"status":"affected","version":"20.4.1"},{"status":"affected","version":"20.3.2_928"},{"status":"affected","version":"20.3.2_929"},{"status":"affected","version":"20.4.1.0.1"},{"status":"affected","version":"20.3.2.1_930"},{"status":"affected","version":"19.2.4"},{"status":"affected","version":"20.5.0.1.1"},{"status":"affected","version":"20.4.1.1"},{"status":"affected","version":"20.3.3"},{"status":"affected","version":"19.2.4.0.1"},{"status":"affected","version":"20.3.2_937"},{"status":"affected","version":"20.3.3.1"},{"status":"affected","version":"20.5.1"},{"status":"affected","version":"20.1.3"},{"status":"affected","version":"20.3.3.0.4"},{"status":"affected","version":"20.3.3.1.2"},{"status":"affected","version":"20.3.3.1.1"},{"status":"affected","version":"20.4.1.2"},{"status":"affected","version":"20.3.3.0.2"},{"status":"affected","version":"20.4.1.1.5"},{"status":"affected","version":"20.4.1.0.01"},{"status":"affected","version":"20.4.1.0.02"},{"status":"affected","version":"20.3.3.1.7"},{"status":"affected","version":"20.3.3.1.5"},{"status":"affected","version":"20.5.1.0.1"},{"status":"affected","version":"20.3.3.1.10"},{"status":"affected","version":"20.3.3.0.8"},{"status":"affected","version":"20.4.2"},{"status":"affected","version":"20.4.2.0.1"},{"status":"affected","version":"20.3.4"},{"status":"affected","version":"20.3.3.0.14"},{"status":"affected","version":"19.2.4.0.8"},{"status":"affected","version":"19.2.4.0.9"},{"status":"affected","version":"20.3.4.0.1"},{"status":"affected","version":"20.3.2.0.5"},{"status":"affected","version":"20.6.1"},{"status":"affected","version":"20.5.1.0.2"},{"status":"affected","version":"20.3.3.0.17"},{"status":"affected","version":"20.6.1.1"},{"status":"affected","version":"20.6.0.18.3"},{"status":"affected","version":"20.3.2.0.6"},{"status":"affected","version":"20.6.0.18.4"},{"status":"affected","version":"20.4.2.0.2"},{"status":"affected","version":"20.3.3.0.16"},{"status":"affected","version":"20.3.4.0.5"},{"status":"affected","version":"20.6.1.0.1"},{"status":"affected","version":"20.3.4.0.6"},{"status":"affected","version":"20.6.2"},{"status":"affected","version":"20.7.1EFT2"},{"status":"affected","version":"20.3.4.0.9"},{"status":"affected","version":"20.3.4.0.11"},{"status":"affected","version":"20.4.2.0.4"},{"status":"affected","version":"20.3.3.0.18"},{"status":"affected","version":"20.7.1"},{"status":"affected","version":"20.6.2.1"},{"status":"affected","version":"20.3.4.1"},{"status":"affected","version":"20.5.1.1"},{"status":"affected","version":"20.4.2.1"},{"status":"affected","version":"20.4.2.1.1"},{"status":"affected","version":"20.3.4.1.1"},{"status":"affected","version":"20.3.813"},{"status":"affected","version":"20.3.4.0.19"},{"status":"affected","version":"20.4.2.2.1"},{"status":"affected","version":"20.5.1.2"},{"status":"affected","version":"20.3.4.2"},{"status":"affected","version":"20.3.814"},{"status":"affected","version":"20.4.2.2"},{"status":"affected","version":"20.6.2.2"},{"status":"affected","version":"20.3.4.2.1"},{"status":"affected","version":"20.7.1.1"},{"status":"affected","version":"20.3.4.1.2"},{"status":"affected","version":"20.6.2.2.2"},{"status":"affected","version":"20.3.4.0.20"},{"status":"affected","version":"20.6.2.2.3"},{"status":"affected","version":"20.4.2.2.2"},{"status":"affected","version":"20.3.5"},{"status":"affected","version":"20.6.2.0.4"},{"status":"affected","version":"20.4.2.2.3"},{"status":"affected","version":"20.3.4.0.24"},{"status":"affected","version":"20.6.2.2.7"},{"status":"affected","version":"20.6.3"},{"status":"affected","version":"20.3.4.2.2"},{"status":"affected","version":"20.4.2.2.4"},{"status":"affected","version":"20.7.1.0.2"},{"status":"affected","version":"20.8.1"},{"status":"affected","version":"20.3.5.0.8"},{"status":"affected","version":"20.3.5.0.9"},{"status":"affected","version":"20.4.2.2.8"},{"status":"affected","version":"20.3.5.0.7"},{"status":"affected","version":"20.6.3.0.7"},{"status":"affected","version":"20.6.3.0.5"},{"status":"affected","version":"20.6.3.0.10"},{"status":"affected","version":"20.6.3.0.2"},{"status":"affected","version":"20.7.2"},{"status":"affected","version":"20.9.1EFT2"},{"status":"affected","version":"20.6.3.0.11"},{"status":"affected","version":"20.6.3.1"},{"status":"affected","version":"20.6.3.0.14"},{"status":"affected","version":"20.6.4"},{"status":"affected","version":"20.9.1"},{"status":"affected","version":"20.6.3.0.19"},{"status":"affected","version":"20.6.3.0.18"},{"status":"affected","version":"20.3.6"},{"status":"affected","version":"20.9.1.1"},{"status":"affected","version":"20.6.3.0.23"},{"status":"affected","version":"20.6.4.0.4"},{"status":"affected","version":"20.6.3.0.25"},{"status":"affected","version":"20.6.5"},{"status":"affected","version":"20.6.3.0.27"},{"status":"affected","version":"20.9.2"},{"status":"affected","version":"20.9.2.1"},{"status":"affected","version":"20.6.3.0.29"},{"status":"affected","version":"20.6.3.0.31"},{"status":"affected","version":"20.6.3.0.32"},{"status":"affected","version":"20.10.1"},{"status":"affected","version":"20.6.3.0.33"},{"status":"affected","version":"20.9.2.0.01"},{"status":"affected","version":"20.9.1_LI_Images"},{"status":"affected","version":"20.10.1_LI_Images"},{"status":"affected","version":"20.9.2_LI_Images"},{"status":"affected","version":"20.3.7"},{"status":"affected","version":"20.9.3"},{"status":"affected","version":"20.6.5.1"},{"status":"affected","version":"20.11.1"},{"status":"affected","version":"20.11.1_LI_Images"},{"status":"affected","version":"20.9.3_LI_ Images"},{"status":"affected","version":"20.6.3.1.1"},{"status":"affected","version":"20.9.3.0.2"},{"status":"affected","version":"20.6.5.1.2"},{"status":"affected","version":"20.9.3.0.3"},{"status":"affected","version":"20.4.2.3"},{"status":"affected","version":"20.6.3.2"},{"status":"affected","version":"20.6.4.1"},{"status":"affected","version":"20.6.3.0.38"},{"status":"affected","version":"20.6.3.0.39"},{"status":"affected","version":"20.3.5.1"},{"status":"affected","version":"20.3.4.3"},{"status":"affected","version":"20.9.3.1"},{"status":"affected","version":"20.3.3.2"},{"status":"affected","version":"20.6.5.2"},{"status":"affected","version":"20.3.7.1"},{"status":"affected","version":"20.10.1.1"},{"status":"affected","version":"20.6.5.2.1"},{"status":"affected","version":"20.3.4.0.25"},{"status":"affected","version":"20.6.2.2.4"},{"status":"affected","version":"20.6.1.2"},{"status":"affected","version":"20.11.1.1"},{"status":"affected","version":"20.9.3.0.5"},{"status":"affected","version":"20.3.4.0.26"},{"status":"affected","version":"20.6.5.1.3"},{"status":"affected","version":"20.6.3.0.40"},{"status":"affected","version":"20.1.3.1"},{"status":"affected","version":"20.9.2.2"},{"status":"affected","version":"20.6.5.2.3"},{"status":"affected","version":"20.6.5.1.4"},{"status":"affected","version":"20.6.5.3"},{"status":"affected","version":"20.6.3.0.41"},{"status":"affected","version":"20.9.3.0.7"},{"status":"affected","version":"20.6.5.1.5"},{"status":"affected","version":"20.9.3.0.4"},{"status":"affected","version":"20.6.4.0.19"},{"status":"affected","version":"20.6.5.1.6"},{"status":"affected","version":"20.9.3.0.8"},{"status":"affected","version":"20.6.3.3"},{"status":"affected","version":"20.3.7.2"},{"status":"affected","version":"20.6.5.4"},{"status":"affected","version":"20.6.5.1.7"},{"status":"affected","version":"20.9.3.0.12"},{"status":"affected","version":"20.6.4.2"},{"status":"affected","version":"20.6.5.5"},{"status":"affected","version":"20.9.3.2"},{"status":"affected","version":"20.11.1.2"},{"status":"affected","version":"20.6.3.4"},{"status":"affected","version":"20.10.1.2"},{"status":"affected","version":"20.6.5.1.9"},{"status":"affected","version":"20.9.3.0.16"},{"status":"affected","version":"20.6.3.0.45"},{"status":"affected","version":"20.6.5.1.10"},{"status":"affected","version":"20.9.3.0.17"},{"status":"affected","version":"20.6.5.2.4"},{"status":"affected","version":"20.6.4.0.21"},{"status":"affected","version":"20.9.3.0.18"},{"status":"affected","version":"20.6.3.0.46"},{"status":"affected","version":"20.6.3.0.47"},{"status":"affected","version":"20.9.2.3"},{"status":"affected","version":"20.9.3.2_LI_Images"},{"status":"affected","version":"20.9.3.0.21"},{"status":"affected","version":"20.9.3.0.20"},{"status":"affected","version":"20.9.4_LI_Images"},{"status":"affected","version":"20.9.4"},{"status":"affected","version":"20.6.5.1.11"},{"status":"affected","version":"20.12.1"},{"status":"affected","version":"20.12.1_LI_Images"},{"status":"affected","version":"20.6.5.1.13"},{"status":"affected","version":"20.9.3.0.23"},{"status":"affected","version":"20.6.5.2.8"},{"status":"affected","version":"20.9.4.1"},{"status":"affected","version":"20.9.4.1_LI_Images"},{"status":"affected","version":"20.9.3.0.25"},{"status":"affected","version":"20.9.3.0.24"},{"status":"affected","version":"20.6.5.1.14"},{"status":"affected","version":"20.3.8"},{"status":"affected","version":"20.6.6"},{"status":"affected","version":"20.9.3.0.26"},{"status":"affected","version":"20.6.3.0.51"},{"status":"affected","version":"20.9.3.0.29"},{"status":"affected","version":"20.12.2"},{"status":"affected","version":"20.12.2_LI_Images"},{"status":"affected","version":"20.6.6.0.1"},{"status":"affected","version":"20.13.1_LI_Images"},{"status":"affected","version":"20.9.4.0.4"},{"status":"affected","version":"20.13.1"},{"status":"affected","version":"20.9.4.1.1"},{"status":"affected","version":"20.9.5"},{"status":"affected","version":"20.9.5_LI_Images"},{"status":"affected","version":"20.12.3_LI_Images"},{"status":"affected","version":"20.12.3"},{"status":"affected","version":"20.9.4.1.3"},{"status":"affected","version":"20.6.7"},{"status":"affected","version":"20.9.5.1"},{"status":"affected","version":"20.9.5.1_LI_Images"},{"status":"affected","version":"20.9.4.1.6"},{"status":"affected","version":"20.14.1"},{"status":"affected","version":"20.14.1_LI_Images"},{"status":"affected","version":"20.9.5.2"},{"status":"affected","version":"20.9.5.2.1"},{"status":"affected","version":"20.9.5.2_LI_Images"},{"status":"affected","version":"20.12.3.1"},{"status":"affected","version":"20.12.4"},{"status":"affected","version":"20.15.1_LI_Images"},{"status":"affected","version":"20.15.1"},{"status":"affected","version":"20.9.5.1.4"},{"status":"affected","version":"20.9.5.2.7"},{"status":"affected","version":"20.9.5.2.13"},{"status":"affected","version":"20.9.6"},{"status":"affected","version":"20.9.6_LI_Images"},{"status":"affected","version":"20.9.5.2.14"},{"status":"affected","version":"20.6.8"},{"status":"affected","version":"20.12.4.0.03"},{"status":"affected","version":"20.16.1"},{"status":"affected","version":"20.16.1_LI_Images"},{"status":"affected","version":"20.12.4_LI_Images"},{"status":"affected","version":"20.9.5.2.16"},{"status":"affected","version":"20.12.4.0.4"},{"status":"affected","version":"20.12.401"},{"status":"affected","version":"20.9.5.3"},{"status":"affected","version":"20.9.5.3_LI_Images"},{"status":"affected","version":"20.12.4.1_LI_Images"},{"status":"affected","version":"20.12.4.1"},{"status":"affected","version":"20.9.5.2.21"},{"status":"affected","version":"20.9.6.0.3"},{"status":"affected","version":"20.12.4.0.6"},{"status":"affected","version":"20.15.2_LI_Images"},{"status":"affected","version":"20.15.2"},{"status":"affected","version":"20.12.4_Monthly_ES5"},{"status":"affected","version":"20.12.5"},{"status":"affected","version":"20.12.5_LI_Images"},{"status":"affected","version":"20.9.7_LI _Images"},{"status":"affected","version":"20.9.7"},{"status":"affected","version":"20.15.3"},{"status":"affected","version":"20.15.3_ LI _Images"},{"status":"affected","version":"20.12.501"},{"status":"affected","version":"20.12.5.1_LI_Images"},{"status":"affected","version":"20.12.5.1"},{"status":"affected","version":"20.12.5.2_LI_Images"},{"status":"affected","version":"20.12.5.2"},{"status":"affected","version":"20.15.3.1"},{"status":"affected","version":"20.15.4_LI_Images"},{"status":"affected","version":"20.15.4"},{"status":"affected","version":"20.9.7.1_LI _Images"},{"status":"affected","version":"20.9.7.1"},{"status":"affected","version":"20.18.1"},{"status":"affected","version":"20.18.1_LI_Images"},{"status":"affected","version":"20.12.6_LI_Images"},{"status":"affected","version":"20.12.6"},{"status":"affected","version":"20.12.5.1.01"},{"status":"affected","version":"20.9.8"},{"status":"affected","version":"20.9.8_LI_Images"},{"status":"affected","version":"20.18.2"},{"status":"affected","version":"20.15.4.1_LI_Images"},{"status":"affected","version":"20.15.4.1"},{"status":"affected","version":"20.18.2_LI_Images"}]}],"cna":{"containers":{"adp":[{"metrics":[{"other":{"content":{"id":"CVE-2026-20122","options":[{"Exploitation":"active"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2026-03-05T00:00:00+00:00","version":"2.0.3"},"type":"ssvc"}},{"other":{"content":{"dateAdded":"2026-04-20","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20122"},"type":"kev"}}],"providerMetadata":{"dateUpdated":"2026-04-21T03:55:33.255Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"references":[{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20122"}],"timeline":[{"lang":"en","time":"2026-04-20T00:00:00.000Z","value":"CVE-2026-20122 added to CISA KEV"}],"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"defaultStatus":"unknown","product":"Cisco Catalyst SD-WAN Manager","vendor":"Cisco","versions":[{"status":"affected","version":"20.1.12"},{"status":"affected","version":"19.2.1"},{"status":"affected","version":"18.4.4"},{"status":"affected","version":"18.4.5"},{"status":"affected","version":"20.1.1.1"},{"status":"affected","version":"20.1.1"},{"status":"affected","version":"19.3.0"},{"status":"affected","version":"19.2.2"},{"status":"affected","version":"19.2.099"},{"status":"affected","version":"18.3.6"},{"status":"affected","version":"18.3.7"},{"status":"affected","version":"19.2.0"},{"status":"affected","version":"18.3.8"},{"status":"affected","version":"19.0.0"},{"status":"affected","version":"19.1.0"},{"status":"affected","version":"18.4.302"},{"status":"affected","version":"18.4.303"},{"status":"affected","version":"19.2.097"},{"status":"affected","version":"19.2.098"},{"status":"affected","version":"17.2.10"},{"status":"affected","version":"18.3.6.1"},{"status":"affected","version":"19.0.1a"},{"status":"affected","version":"18.2.0"},{"status":"affected","version":"18.4.3"},{"status":"affected","version":"18.4.1"},{"status":"affected","version":"17.2.8"},{"status":"affected","version":"18.3.3.1"},{"status":"affected","version":"18.4.0"},{"status":"affected","version":"18.3.1"},{"status":"affected","version":"17.2.6"},{"status":"affected","version":"17.2.9"},{"status":"affected","version":"18.3.4"},{"status":"affected","version":"17.2.5"},{"status":"affected","version":"18.3.1.1"},{"status":"affected","version":"18.3.5"},{"status":"affected","version":"18.4.0.1"},{"status":"affected","version":"18.3.3"},{"status":"affected","version":"17.2.7"},{"status":"affected","version":"17.2.4"},{"status":"affected","version":"18.3.0"},{"status":"affected","version":"19.2.3"},{"status":"affected","version":"18.4.501_ES"},{"status":"affected","version":"20.3.1"},{"status":"affected","version":"20.1.2"},{"status":"affected","version":"19.2.929"},{"status":"affected","version":"19.2.31"},{"status":"affected","version":"20.3.2"},{"status":"affected","version":"19.2.32"},{"status":"affected","version":"20.3.2_925"},{"status":"affected","version":"20.3.2.1"},{"status":"affected","version":"20.3.2.1_927"},{"status":"affected","version":"18.4.6"},{"status":"affected","version":"20.1.2_937"},{"status":"affected","version":"20.4.1"},{"status":"affected","version":"20.3.2_928"},{"status":"affected","version":"20.3.2_929"},{"status":"affected","version":"20.4.1.0.1"},{"status":"affected","version":"20.3.2.1_930"},{"status":"affected","version":"19.2.4"},{"status":"affected","version":"20.5.0.1.1"},{"status":"affected","version":"20.4.1.1"},{"status":"affected","version":"20.3.3"},{"status":"affected","version":"19.2.4.0.1"},{"status":"affected","version":"20.3.2_937"},{"status":"affected","version":"20.3.3.1"},{"status":"affected","version":"20.5.1"},{"status":"affected","version":"20.1.3"},{"status":"affected","version":"20.3.3.0.4"},{"status":"affected","version":"20.3.3.1.2"},{"status":"affected","version":"20.3.3.1.1"},{"status":"affected","version":"20.4.1.2"},{"status":"affected","version":"20.3.3.0.2"},{"status":"affected","version":"20.4.1.1.5"},{"status":"affected","version":"20.4.1.0.01"},{"status":"affected","version":"20.4.1.0.02"},{"status":"affected","version":"20.3.3.1.7"},{"status":"affected","version":"20.3.3.1.5"},{"status":"affected","version":"20.5.1.0.1"},{"status":"affected","version":"20.3.3.1.10"},{"status":"affected","version":"20.3.3.0.8"},{"status":"affected","version":"20.4.2"},{"status":"affected","version":"20.4.2.0.1"},{"status":"affected","version":"20.3.4"},{"status":"affected","version":"20.3.3.0.14"},{"status":"affected","version":"19.2.4.0.8"},{"status":"affected","version":"19.2.4.0.9"},{"status":"affected","version":"20.3.4.0.1"},{"status":"affected","version":"20.3.2.0.5"},{"status":"affected","version":"20.6.1"},{"status":"affected","version":"20.5.1.0.2"},{"status":"affected","version":"20.3.3.0.17"},{"status":"affected","version":"20.6.1.1"},{"status":"affected","version":"20.6.0.18.3"},{"status":"affected","version":"20.3.2.0.6"},{"status":"affected","version":"20.6.0.18.4"},{"status":"affected","version":"20.4.2.0.2"},{"status":"affected","version":"20.3.3.0.16"},{"status":"affected","version":"20.3.4.0.5"},{"status":"affected","version":"20.6.1.0.1"},{"status":"affected","version":"20.3.4.0.6"},{"status":"affected","version":"20.6.2"},{"status":"affected","version":"20.7.1EFT2"},{"status":"affected","version":"20.3.4.0.9"},{"status":"affected","version":"20.3.4.0.11"},{"status":"affected","version":"20.4.2.0.4"},{"status":"affected","version":"20.3.3.0.18"},{"status":"affected","version":"20.7.1"},{"status":"affected","version":"20.6.2.1"},{"status":"affected","version":"20.3.4.1"},{"status":"affected","version":"20.5.1.1"},{"status":"affected","version":"20.4.2.1"},{"status":"affected","version":"20.4.2.1.1"},{"status":"affected","version":"20.3.4.1.1"},{"status":"affected","version":"20.3.813"},{"status":"affected","version":"20.3.4.0.19"},{"status":"affected","version":"20.4.2.2.1"},{"status":"affected","version":"20.5.1.2"},{"status":"affected","version":"20.3.4.2"},{"status":"affected","version":"20.3.814"},{"status":"affected","version":"20.4.2.2"},{"status":"affected","version":"20.6.2.2"},{"status":"affected","version":"20.3.4.2.1"},{"status":"affected","version":"20.7.1.1"},{"status":"affected","version":"20.3.4.1.2"},{"status":"affected","version":"20.6.2.2.2"},{"status":"affected","version":"20.3.4.0.20"},{"status":"affected","version":"20.6.2.2.3"},{"status":"affected","version":"20.4.2.2.2"},{"status":"affected","version":"20.3.5"},{"status":"affected","version":"20.6.2.0.4"},{"status":"affected","version":"20.4.2.2.3"},{"status":"affected","version":"20.3.4.0.24"},{"status":"affected","version":"20.6.2.2.7"},{"status":"affected","version":"20.6.3"},{"status":"affected","version":"20.3.4.2.2"},{"status":"affected","version":"20.4.2.2.4"},{"status":"affected","version":"20.7.1.0.2"},{"status":"affected","version":"20.8.1"},{"status":"affected","version":"20.3.5.0.8"},{"status":"affected","version":"20.3.5.0.9"},{"status":"affected","version":"20.4.2.2.8"},{"status":"affected","version":"20.3.5.0.7"},{"status":"affected","version":"20.6.3.0.7"},{"status":"affected","version":"20.6.3.0.5"},{"status":"affected","version":"20.6.3.0.10"},{"status":"affected","version":"20.6.3.0.2"},{"status":"affected","version":"20.7.2"},{"status":"affected","version":"20.9.1EFT2"},{"status":"affected","version":"20.6.3.0.11"},{"status":"affected","version":"20.6.3.1"},{"status":"affected","version":"20.6.3.0.14"},{"status":"affected","version":"20.6.4"},{"status":"affected","version":"20.9.1"},{"status":"affected","version":"20.6.3.0.19"},{"status":"affected","version":"20.6.3.0.18"},{"status":"affected","version":"20.3.6"},{"status":"affected","version":"20.9.1.1"},{"status":"affected","version":"20.6.3.0.23"},{"status":"affected","version":"20.6.4.0.4"},{"status":"affected","version":"20.6.3.0.25"},{"status":"affected","version":"20.6.5"},{"status":"affected","version":"20.6.3.0.27"},{"status":"affected","version":"20.9.2"},{"status":"affected","version":"20.9.2.1"},{"status":"affected","version":"20.6.3.0.29"},{"status":"affected","version":"20.6.3.0.31"},{"status":"affected","version":"20.6.3.0.32"},{"status":"affected","version":"20.10.1"},{"status":"affected","version":"20.6.3.0.33"},{"status":"affected","version":"20.9.2.0.01"},{"status":"affected","version":"20.9.1_LI_Images"},{"status":"affected","version":"20.10.1_LI_Images"},{"status":"affected","version":"20.9.2_LI_Images"},{"status":"affected","version":"20.3.7"},{"status":"affected","version":"20.9.3"},{"status":"affected","version":"20.6.5.1"},{"status":"affected","version":"20.11.1"},{"status":"affected","version":"20.11.1_LI_Images"},{"status":"affected","version":"20.9.3_LI_ Images"},{"status":"affected","version":"20.6.3.1.1"},{"status":"affected","version":"20.9.3.0.2"},{"status":"affected","version":"20.6.5.1.2"},{"status":"affected","version":"20.9.3.0.3"},{"status":"affected","version":"20.4.2.3"},{"status":"affected","version":"20.6.3.2"},{"status":"affected","version":"20.6.4.1"},{"status":"affected","version":"20.6.3.0.38"},{"status":"affected","version":"20.6.3.0.39"},{"status":"affected","version":"20.3.5.1"},{"status":"affected","version":"20.3.4.3"},{"status":"affected","version":"20.9.3.1"},{"status":"affected","version":"20.3.3.2"},{"status":"affected","version":"20.6.5.2"},{"status":"affected","version":"20.3.7.1"},{"status":"affected","version":"20.10.1.1"},{"status":"affected","version":"20.6.5.2.1"},{"status":"affected","version":"20.3.4.0.25"},{"status":"affected","version":"20.6.2.2.4"},{"status":"affected","version":"20.6.1.2"},{"status":"affected","version":"20.11.1.1"},{"status":"affected","version":"20.9.3.0.5"},{"status":"affected","version":"20.3.4.0.26"},{"status":"affected","version":"20.6.5.1.3"},{"status":"affected","version":"20.6.3.0.40"},{"status":"affected","version":"20.1.3.1"},{"status":"affected","version":"20.9.2.2"},{"status":"affected","version":"20.6.5.2.3"},{"status":"affected","version":"20.6.5.1.4"},{"status":"affected","version":"20.6.5.3"},{"status":"affected","version":"20.6.3.0.41"},{"status":"affected","version":"20.9.3.0.7"},{"status":"affected","version":"20.6.5.1.5"},{"status":"affected","version":"20.9.3.0.4"},{"status":"affected","version":"20.6.4.0.19"},{"status":"affected","version":"20.6.5.1.6"},{"status":"affected","version":"20.9.3.0.8"},{"status":"affected","version":"20.6.3.3"},{"status":"affected","version":"20.3.7.2"},{"status":"affected","version":"20.6.5.4"},{"status":"affected","version":"20.6.5.1.7"},{"status":"affected","version":"20.9.3.0.12"},{"status":"affected","version":"20.6.4.2"},{"status":"affected","version":"20.6.5.5"},{"status":"affected","version":"20.9.3.2"},{"status":"affected","version":"20.11.1.2"},{"status":"affected","version":"20.6.3.4"},{"status":"affected","version":"20.10.1.2"},{"status":"affected","version":"20.6.5.1.9"},{"status":"affected","version":"20.9.3.0.16"},{"status":"affected","version":"20.6.3.0.45"},{"status":"affected","version":"20.6.5.1.10"},{"status":"affected","version":"20.9.3.0.17"},{"status":"affected","version":"20.6.5.2.4"},{"status":"affected","version":"20.6.4.0.21"},{"status":"affected","version":"20.9.3.0.18"},{"status":"affected","version":"20.6.3.0.46"},{"status":"affected","version":"20.6.3.0.47"},{"status":"affected","version":"20.9.2.3"},{"status":"affected","version":"20.9.3.2_LI_Images"},{"status":"affected","version":"20.9.3.0.21"},{"status":"affected","version":"20.9.3.0.20"},{"status":"affected","version":"20.9.4_LI_Images"},{"status":"affected","version":"20.9.4"},{"status":"affected","version":"20.6.5.1.11"},{"status":"affected","version":"20.12.1"},{"status":"affected","version":"20.12.1_LI_Images"},{"status":"affected","version":"20.6.5.1.13"},{"status":"affected","version":"20.9.3.0.23"},{"status":"affected","version":"20.6.5.2.8"},{"status":"affected","version":"20.9.4.1"},{"status":"affected","version":"20.9.4.1_LI_Images"},{"status":"affected","version":"20.9.3.0.25"},{"status":"affected","version":"20.9.3.0.24"},{"status":"affected","version":"20.6.5.1.14"},{"status":"affected","version":"20.3.8"},{"status":"affected","version":"20.6.6"},{"status":"affected","version":"20.9.3.0.26"},{"status":"affected","version":"20.6.3.0.51"},{"status":"affected","version":"20.9.3.0.29"},{"status":"affected","version":"20.12.2"},{"status":"affected","version":"20.12.2_LI_Images"},{"status":"affected","version":"20.6.6.0.1"},{"status":"affected","version":"20.13.1_LI_Images"},{"status":"affected","version":"20.9.4.0.4"},{"status":"affected","version":"20.13.1"},{"status":"affected","version":"20.9.4.1.1"},{"status":"affected","version":"20.9.5"},{"status":"affected","version":"20.9.5_LI_Images"},{"status":"affected","version":"20.12.3_LI_Images"},{"status":"affected","version":"20.12.3"},{"status":"affected","version":"20.9.4.1.3"},{"status":"affected","version":"20.6.7"},{"status":"affected","version":"20.9.5.1"},{"status":"affected","version":"20.9.5.1_LI_Images"},{"status":"affected","version":"20.9.4.1.6"},{"status":"affected","version":"20.14.1"},{"status":"affected","version":"20.14.1_LI_Images"},{"status":"affected","version":"20.9.5.2"},{"status":"affected","version":"20.9.5.2.1"},{"status":"affected","version":"20.9.5.2_LI_Images"},{"status":"affected","version":"20.12.3.1"},{"status":"affected","version":"20.12.4"},{"status":"affected","version":"20.15.1_LI_Images"},{"status":"affected","version":"20.15.1"},{"status":"affected","version":"20.9.5.1.4"},{"status":"affected","version":"20.9.5.2.7"},{"status":"affected","version":"20.9.5.2.13"},{"status":"affected","version":"20.9.6"},{"status":"affected","version":"20.9.6_LI_Images"},{"status":"affected","version":"20.9.5.2.14"},{"status":"affected","version":"20.6.8"},{"status":"affected","version":"20.12.4.0.03"},{"status":"affected","version":"20.16.1"},{"status":"affected","version":"20.16.1_LI_Images"},{"status":"affected","version":"20.12.4_LI_Images"},{"status":"affected","version":"20.9.5.2.16"},{"status":"affected","version":"20.12.4.0.4"},{"status":"affected","version":"20.12.401"},{"status":"affected","version":"20.9.5.3"},{"status":"affected","version":"20.9.5.3_LI_Images"},{"status":"affected","version":"20.12.4.1_LI_Images"},{"status":"affected","version":"20.12.4.1"},{"status":"affected","version":"20.9.5.2.21"},{"status":"affected","version":"20.9.6.0.3"},{"status":"affected","version":"20.12.4.0.6"},{"status":"affected","version":"20.15.2_LI_Images"},{"status":"affected","version":"20.15.2"},{"status":"affected","version":"20.12.4_Monthly_ES5"},{"status":"affected","version":"20.12.5"},{"status":"affected","version":"20.12.5_LI_Images"},{"status":"affected","version":"20.9.7_LI _Images"},{"status":"affected","version":"20.9.7"},{"status":"affected","version":"20.15.3"},{"status":"affected","version":"20.15.3_ LI _Images"},{"status":"affected","version":"20.12.501"},{"status":"affected","version":"20.12.5.1_LI_Images"},{"status":"affected","version":"20.12.5.1"},{"status":"affected","version":"20.12.5.2_LI_Images"},{"status":"affected","version":"20.12.5.2"},{"status":"affected","version":"20.15.3.1"},{"status":"affected","version":"20.15.4_LI_Images"},{"status":"affected","version":"20.15.4"},{"status":"affected","version":"20.9.7.1_LI _Images"},{"status":"affected","version":"20.9.7.1"},{"status":"affected","version":"20.18.1"},{"status":"affected","version":"20.18.1_LI_Images"},{"status":"affected","version":"20.12.6_LI_Images"},{"status":"affected","version":"20.12.6"},{"status":"affected","version":"20.12.5.1.01"},{"status":"affected","version":"20.9.8"},{"status":"affected","version":"20.9.8_LI_Images"},{"status":"affected","version":"20.18.2"},{"status":"affected","version":"20.15.4.1_LI_Images"},{"status":"affected","version":"20.15.4.1"},{"status":"affected","version":"20.18.2_LI_Images"}]}],"descriptions":[{"lang":"en","value":"A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite arbitrary files on the local file system. To exploit this vulnerability, the attacker must have valid read-only credentials with API access on the affected system.\r\n\r\nThis vulnerability is due to improper file handling on the API interface of an affected system. An attacker could exploit this vulnerability by uploading a malicious file on the local file system. A successful exploit could allow the attacker to overwrite arbitrary files on the affected system and gain vmanage user privileges."}],"exploits":[{"lang":"en","value":"The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in CVE-2026-20133, CVE-2026-20126, and CVE-2026-20129.\r\n\r\nIn March 2026, the Cisco PSIRT became aware of active exploitation of the vulnerabilities that are described in CVE-2026-20128 and CVE-2026-20122 only. The vulnerabilities that are described in the other CVEs in this advisory are not known to have been compromised. Cisco strongly recommends that customers upgrade to a fixed software release to remediate these vulnerabilities."}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.4,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","version":"3.1"},"format":"cvssV3_1"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-648","description":"Incorrect Use of Privileged APIs","lang":"en","type":"cwe"}]}],"providerMetadata":{"dateUpdated":"2026-03-20T21:47:05.503Z","orgId":"d1c1063e-7a18-46af-9102-31f8928bc633","shortName":"cisco"},"references":[{"name":"cisco-sa-sdwan-authbp-qwCX8D4v","url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v"}],"source":{"advisory":"cisco-sa-sdwan-authbp-qwCX8D4v","defects":["CSCws33584"],"discovery":"INTERNAL"},"title":"Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability"}},"cveMetadata":{"assignerOrgId":"d1c1063e-7a18-46af-9102-31f8928bc633","assignerShortName":"cisco","cveId":"CVE-2026-20122","datePublished":"2026-02-25T16:14:21.256Z","dateReserved":"2025-10-08T11:59:15.377Z","dateUpdated":"2026-04-21T03:55:33.255Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"cna_checked":1794133200,"cve":"CVE-2026-20122","description":"A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite arbitrary files on the local file system. To exploit this vulnerability, the attacker must have valid read-only credentials with API access on the affected system.\r\n\r\nThis vulnerability is due to improper file handling on the API interface of an affected system. An attacker could exploit this vulnerability by uploading a malicious file on the local file system. A successful exploit could allow the attacker to overwrite arbitrary files on the affected system and gain vmanage user privileges.","epss":{"date":"2026-11-12","epss":0.25801,"percentile":0.98001},"epss_checked":1794522003,"first_seen":1793665375,"kev":{"cveID":"CVE-2026-20122","cwes":["CWE-648"],"dateAdded":"2026-04-20","dueDate":"2026-04-23","forensicTriage":"No","knownRansomwareCampaignUse":"Unknown","notes":"CISA Mitigation Instructions: https://www.cisa.gov/news-events/directives/ed-26-03-mitigate-vulnerabilities-cisco-sd-wan-systems ; https://www.cisa.gov/news-events/directives/supplemental-direction-ed-26-03-hunt-and-hardening-guidance-cisco-sd-wan-systems ; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v ; https://nvd.nist.gov/vuln/detail/CVE-2026-20122","product":"Catalyst SD-WAN Manger","requiredAction":"Please adhere to CISA\u2019s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA\u2019s Emergency Directive 26-03 (URL listed below in Notes) and CISA\u2019s \u201cHunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.","shortDescription":"Cisco Catalyst SD-WAN Manager contains an incorrect use of privileged APIs vulnerability due to improper file handling on the API interface of an affected system. An attacker could exploit this vulnerability by uploading a malicious file on the local file system. A successful exploit could allow the attacker to overwrite arbitrary files on the affected system and gain vmanage user privileges.","vendorProject":"Cisco","vulnerabilityName":"Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability"},"kev_checked":1794522003,"products":"Cisco Cisco Catalyst SD-WAN Manager","references":["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20122"],"score":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.4,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","provider":"cisco","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","version":"3.1"},"solutions":"","state":"PUBLISHED","title":"Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability","updated_at":1794500401,"workarounds":""},"sources":[]}