CVE-2026-20182

🗓️ 14 May 2026 16:08:25Reported by AttackerKBType

CVE-2026-20182: Unauthenticated attackers can bypass peering authentication to gain admin access and modify SD-WAN via NETCONF.

Reporter	Title	Published	Views	Family All 27
GithubExploit	Exploit for Improper Authentication in Cisco Catalyst_Sd-Wan_Manager	15 May 202614:07	–	githubexploit
GithubExploit	Exploit for Improper Authentication in Cisco Catalyst_Sd-Wan_Manager	22 May 202621:17	–	githubexploit
GithubExploit	Exploit for Improper Authentication in Cisco Catalyst_Sd-Wan_Manager	26 May 202618:10	–	githubexploit
BDU FSTEC	The vulnerability of the centralized network management system of Cisco Catalyst SD-WAN Manager and the software for traffic management of Cisco Catalyst SD-WAN Controller, due to authentication mechanism flaws, allows attackers to gain unauthorized access to the system.	15 May 202600:00	–	bdu_fstec
Circl	CVE-2026-20182	14 May 202611:33	–	circl
CISA KEV Catalog	Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability	14 May 202600:00	–	cisa_kev
CISA	CISA Adds One Known Exploited Vulnerability to Catalog	14 May 202612:00	–	cisa
CISA	CISA and Partners Release Guidance for Ongoing Global Exploitation of Cisco SD-WAN Systems	14 May 202612:00	–	cisa
Cisco	Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability	14 May 202616:00	–	cisco
Tenable Nessus	Cisco Catalyst SD-WAN Controller Authentication Bypass (cisco-sa-sdwan-rpa2-v69WY2SW)	15 May 202600:00	–	nessus

Vulners

Node

Source	Link
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SW
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa-EHchtZk
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/networking/cisco_sdwan_vhub_auth_bypass.rb

16 May 2026 06:04Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.110

EPSS0.91522

SSVC