HackZoneLabs News
Newsletter

CVE-2026-20122

Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability

  • Medium 5.4
  • Exploited: added to CISA KEV 20 Apr 2026

Description

A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite arbitrary files on the local file system. To exploit this vulnerability, the attacker must have valid read-only credentials with API access on the affected system. This vulnerability is due to improper file handling on the API interface of an affected system. An attacker could exploit this vulnerability by uploading a malicious file on the local file system. A successful exploit could allow the attacker to overwrite arbitrary files on the affected system and gain vmanage user privileges.

Key facts

Published
25 Feb 2026
Last changed
21 Apr 2026
Assigned by
cisco
KEV added
20 Apr 2026
KEV fix due
23 Apr 2026
EPSS
25.801% likely to be exploited in the next 30 days, higher than 98.004% of CVEs (scores for 15 Nov 2026)
SSVC (CISA)
Exploitation: active; Automatable: no; Technical impact: total

Severity scores

Each score is shown as its source gave it. They are not averaged or merged.

  • 5.4CVSS 3.1, Mediumfrom the CNA (cisco)CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

What to do

  • Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.CISA KEV required action

Historical context and remediation

This reference retains the original CVE publication date. A recent record update does not mean a new attack occurred.

No separately sourced impact summary is available on this page yet. Consult the description, version data and dated exploitation evidence.

Version statuses below come from the CNA. An “unaffected” version is not necessarily a currently supported release or proof of a patch date. EPSS is a dated risk estimate, not a count of historical attacks.

Read the original CVE record.

Affected products

VendorProductVersions
CiscoCisco Catalyst SD-WAN Manager
  • Default status: unknown
  • 20.1.12 (affected)
  • 19.2.1 (affected)
  • 18.4.4 (affected)
  • 18.4.5 (affected)
  • 20.1.1.1 (affected)
  • 20.1.1 (affected)
  • 19.3.0 (affected)
  • 19.2.2 (affected)
  • 19.2.099 (affected)
  • 18.3.6 (affected)
  • 18.3.7 (affected)
  • 19.2.0 (affected)
  • 18.3.8 (affected)
  • 19.0.0 (affected)
  • 19.1.0 (affected)
  • 18.4.302 (affected)
  • 18.4.303 (affected)
  • 19.2.097 (affected)
  • 19.2.098 (affected)
  • 17.2.10 (affected)
  • 18.3.6.1 (affected)
  • 19.0.1a (affected)
  • 18.2.0 (affected)
  • 18.4.3 (affected)
  • 18.4.1 (affected)
  • 17.2.8 (affected)
  • 18.3.3.1 (affected)
  • 18.4.0 (affected)
  • 18.3.1 (affected)
  • 17.2.6 (affected)
  • 17.2.9 (affected)
  • 18.3.4 (affected)
  • 17.2.5 (affected)
  • 18.3.1.1 (affected)
  • 18.3.5 (affected)
  • 18.4.0.1 (affected)
  • 18.3.3 (affected)
  • 17.2.7 (affected)
  • 17.2.4 (affected)
  • 18.3.0 (affected)
  • 19.2.3 (affected)
  • 18.4.501_ES (affected)
  • 20.3.1 (affected)
  • 20.1.2 (affected)
  • 19.2.929 (affected)
  • 19.2.31 (affected)
  • 20.3.2 (affected)
  • 19.2.32 (affected)
  • 20.3.2_925 (affected)
  • 20.3.2.1 (affected)
  • 20.3.2.1_927 (affected)
  • 18.4.6 (affected)
  • 20.1.2_937 (affected)
  • 20.4.1 (affected)
  • 20.3.2_928 (affected)
  • 20.3.2_929 (affected)
  • 20.4.1.0.1 (affected)
  • 20.3.2.1_930 (affected)
  • 19.2.4 (affected)
  • 20.5.0.1.1 (affected)
  • 20.4.1.1 (affected)
  • 20.3.3 (affected)
  • 19.2.4.0.1 (affected)
  • 20.3.2_937 (affected)
  • 20.3.3.1 (affected)
  • 20.5.1 (affected)
  • 20.1.3 (affected)
  • 20.3.3.0.4 (affected)
  • 20.3.3.1.2 (affected)
  • 20.3.3.1.1 (affected)
  • 20.4.1.2 (affected)
  • 20.3.3.0.2 (affected)
  • 20.4.1.1.5 (affected)
  • 20.4.1.0.01 (affected)
  • 20.4.1.0.02 (affected)
  • 20.3.3.1.7 (affected)
  • 20.3.3.1.5 (affected)
  • 20.5.1.0.1 (affected)
  • 20.3.3.1.10 (affected)
  • 20.3.3.0.8 (affected)
  • 20.4.2 (affected)
  • 20.4.2.0.1 (affected)
  • 20.3.4 (affected)
  • 20.3.3.0.14 (affected)
  • 19.2.4.0.8 (affected)
  • 19.2.4.0.9 (affected)
  • 20.3.4.0.1 (affected)
  • 20.3.2.0.5 (affected)
  • 20.6.1 (affected)
  • 20.5.1.0.2 (affected)
  • 20.3.3.0.17 (affected)
  • 20.6.1.1 (affected)
  • 20.6.0.18.3 (affected)
  • 20.3.2.0.6 (affected)
  • 20.6.0.18.4 (affected)
  • 20.4.2.0.2 (affected)
  • 20.3.3.0.16 (affected)
  • 20.3.4.0.5 (affected)
  • 20.6.1.0.1 (affected)
  • 20.3.4.0.6 (affected)
  • 20.6.2 (affected)
  • 20.7.1EFT2 (affected)
  • 20.3.4.0.9 (affected)
  • 20.3.4.0.11 (affected)
  • 20.4.2.0.4 (affected)
  • 20.3.3.0.18 (affected)
  • 20.7.1 (affected)
  • 20.6.2.1 (affected)
  • 20.3.4.1 (affected)
  • 20.5.1.1 (affected)
  • 20.4.2.1 (affected)
  • 20.4.2.1.1 (affected)
  • 20.3.4.1.1 (affected)
  • 20.3.813 (affected)
  • 20.3.4.0.19 (affected)
  • 20.4.2.2.1 (affected)
  • 20.5.1.2 (affected)
  • 20.3.4.2 (affected)
  • 20.3.814 (affected)
  • 20.4.2.2 (affected)
  • 20.6.2.2 (affected)
  • 20.3.4.2.1 (affected)
  • 20.7.1.1 (affected)
  • 20.3.4.1.2 (affected)
  • 20.6.2.2.2 (affected)
  • 20.3.4.0.20 (affected)
  • 20.6.2.2.3 (affected)
  • 20.4.2.2.2 (affected)
  • 20.3.5 (affected)
  • 20.6.2.0.4 (affected)
  • 20.4.2.2.3 (affected)
  • 20.3.4.0.24 (affected)
  • 20.6.2.2.7 (affected)
  • 20.6.3 (affected)
  • 20.3.4.2.2 (affected)
  • 20.4.2.2.4 (affected)
  • 20.7.1.0.2 (affected)
  • 20.8.1 (affected)
  • 20.3.5.0.8 (affected)
  • 20.3.5.0.9 (affected)
  • 20.4.2.2.8 (affected)
  • 20.3.5.0.7 (affected)
  • 20.6.3.0.7 (affected)
  • 20.6.3.0.5 (affected)
  • 20.6.3.0.10 (affected)
  • 20.6.3.0.2 (affected)
  • 20.7.2 (affected)
  • 20.9.1EFT2 (affected)
  • 20.6.3.0.11 (affected)
  • 20.6.3.1 (affected)
  • 20.6.3.0.14 (affected)
  • 20.6.4 (affected)
  • 20.9.1 (affected)
  • 20.6.3.0.19 (affected)
  • 20.6.3.0.18 (affected)
  • 20.3.6 (affected)
  • 20.9.1.1 (affected)
  • 20.6.3.0.23 (affected)
  • 20.6.4.0.4 (affected)
  • 20.6.3.0.25 (affected)
  • 20.6.5 (affected)
  • 20.6.3.0.27 (affected)
  • 20.9.2 (affected)
  • 20.9.2.1 (affected)
  • 20.6.3.0.29 (affected)
  • 20.6.3.0.31 (affected)
  • 20.6.3.0.32 (affected)
  • 20.10.1 (affected)
  • 20.6.3.0.33 (affected)
  • 20.9.2.0.01 (affected)
  • 20.9.1_LI_Images (affected)
  • 20.10.1_LI_Images (affected)
  • 20.9.2_LI_Images (affected)
  • 20.3.7 (affected)
  • 20.9.3 (affected)
  • 20.6.5.1 (affected)
  • 20.11.1 (affected)
  • 20.11.1_LI_Images (affected)
  • 20.9.3_LI_ Images (affected)
  • 20.6.3.1.1 (affected)
  • 20.9.3.0.2 (affected)
  • 20.6.5.1.2 (affected)
  • 20.9.3.0.3 (affected)
  • 20.4.2.3 (affected)
  • 20.6.3.2 (affected)
  • 20.6.4.1 (affected)
  • 20.6.3.0.38 (affected)
  • 20.6.3.0.39 (affected)
  • 20.3.5.1 (affected)
  • 20.3.4.3 (affected)
  • 20.9.3.1 (affected)
  • 20.3.3.2 (affected)
  • 20.6.5.2 (affected)
  • 20.3.7.1 (affected)
  • 20.10.1.1 (affected)
  • 20.6.5.2.1 (affected)
  • 20.3.4.0.25 (affected)
  • 20.6.2.2.4 (affected)
  • 20.6.1.2 (affected)
  • 20.11.1.1 (affected)
  • 20.9.3.0.5 (affected)
  • 20.3.4.0.26 (affected)
  • 20.6.5.1.3 (affected)
  • 20.6.3.0.40 (affected)
  • 20.1.3.1 (affected)
  • 20.9.2.2 (affected)
  • 20.6.5.2.3 (affected)
  • 20.6.5.1.4 (affected)
  • 20.6.5.3 (affected)
  • 20.6.3.0.41 (affected)
  • 20.9.3.0.7 (affected)
  • 20.6.5.1.5 (affected)
  • 20.9.3.0.4 (affected)
  • 20.6.4.0.19 (affected)
  • 20.6.5.1.6 (affected)
  • 20.9.3.0.8 (affected)
  • 20.6.3.3 (affected)
  • 20.3.7.2 (affected)
  • 20.6.5.4 (affected)
  • 20.6.5.1.7 (affected)
  • 20.9.3.0.12 (affected)
  • 20.6.4.2 (affected)
  • 20.6.5.5 (affected)
  • 20.9.3.2 (affected)
  • 20.11.1.2 (affected)
  • 20.6.3.4 (affected)
  • 20.10.1.2 (affected)
  • 20.6.5.1.9 (affected)
  • 20.9.3.0.16 (affected)
  • 20.6.3.0.45 (affected)
  • 20.6.5.1.10 (affected)
  • 20.9.3.0.17 (affected)
  • 20.6.5.2.4 (affected)
  • 20.6.4.0.21 (affected)
  • 20.9.3.0.18 (affected)
  • 20.6.3.0.46 (affected)
  • 20.6.3.0.47 (affected)
  • 20.9.2.3 (affected)
  • 20.9.3.2_LI_Images (affected)
  • 20.9.3.0.21 (affected)
  • 20.9.3.0.20 (affected)
  • 20.9.4_LI_Images (affected)
  • 20.9.4 (affected)
  • 20.6.5.1.11 (affected)
  • 20.12.1 (affected)
  • 20.12.1_LI_Images (affected)
  • 20.6.5.1.13 (affected)
  • 20.9.3.0.23 (affected)
  • 20.6.5.2.8 (affected)
  • 20.9.4.1 (affected)
  • 20.9.4.1_LI_Images (affected)
  • 20.9.3.0.25 (affected)
  • 20.9.3.0.24 (affected)
  • 20.6.5.1.14 (affected)
  • 20.3.8 (affected)
  • 20.6.6 (affected)
  • 20.9.3.0.26 (affected)
  • 20.6.3.0.51 (affected)
  • 20.9.3.0.29 (affected)
  • 20.12.2 (affected)
  • 20.12.2_LI_Images (affected)
  • 20.6.6.0.1 (affected)
  • 20.13.1_LI_Images (affected)
  • 20.9.4.0.4 (affected)
  • 20.13.1 (affected)
  • 20.9.4.1.1 (affected)
  • 20.9.5 (affected)
  • 20.9.5_LI_Images (affected)
  • 20.12.3_LI_Images (affected)
  • 20.12.3 (affected)
  • 20.9.4.1.3 (affected)
  • 20.6.7 (affected)
  • 20.9.5.1 (affected)
  • 20.9.5.1_LI_Images (affected)
  • 20.9.4.1.6 (affected)
  • 20.14.1 (affected)
  • 20.14.1_LI_Images (affected)
  • 20.9.5.2 (affected)
  • 20.9.5.2.1 (affected)
  • 20.9.5.2_LI_Images (affected)
  • 20.12.3.1 (affected)
  • 20.12.4 (affected)
  • 20.15.1_LI_Images (affected)
  • 20.15.1 (affected)
  • 20.9.5.1.4 (affected)
  • 20.9.5.2.7 (affected)
  • 20.9.5.2.13 (affected)
  • 20.9.6 (affected)
  • 20.9.6_LI_Images (affected)
  • 20.9.5.2.14 (affected)
  • 20.6.8 (affected)
  • 20.12.4.0.03 (affected)
  • 20.16.1 (affected)
  • 20.16.1_LI_Images (affected)
  • 20.12.4_LI_Images (affected)
  • 20.9.5.2.16 (affected)
  • 20.12.4.0.4 (affected)
  • 20.12.401 (affected)
  • 20.9.5.3 (affected)
  • 20.9.5.3_LI_Images (affected)
  • 20.12.4.1_LI_Images (affected)
  • 20.12.4.1 (affected)
  • 20.9.5.2.21 (affected)
  • 20.9.6.0.3 (affected)
  • 20.12.4.0.6 (affected)
  • 20.15.2_LI_Images (affected)
  • 20.15.2 (affected)
  • 20.12.4_Monthly_ES5 (affected)
  • 20.12.5 (affected)
  • 20.12.5_LI_Images (affected)
  • 20.9.7_LI _Images (affected)
  • 20.9.7 (affected)
  • 20.15.3 (affected)
  • 20.15.3_ LI _Images (affected)
  • 20.12.501 (affected)
  • 20.12.5.1_LI_Images (affected)
  • 20.12.5.1 (affected)
  • 20.12.5.2_LI_Images (affected)
  • 20.12.5.2 (affected)
  • 20.15.3.1 (affected)
  • 20.15.4_LI_Images (affected)
  • 20.15.4 (affected)
  • 20.9.7.1_LI _Images (affected)
  • 20.9.7.1 (affected)
  • 20.18.1 (affected)
  • 20.18.1_LI_Images (affected)
  • 20.12.6_LI_Images (affected)
  • 20.12.6 (affected)
  • 20.12.5.1.01 (affected)
  • 20.9.8 (affected)
  • 20.9.8_LI_Images (affected)
  • 20.18.2 (affected)
  • 20.15.4.1_LI_Images (affected)
  • 20.15.4.1 (affected)
  • 20.18.2_LI_Images (affected)

Timeline

  1. 25 Feb 2026 Published
  2. 20 Apr 2026 CVE-2026-20122 added to CISA KEV
  3. 20 Apr 2026 Added to the CISA KEV catalogue

Weakness

References