The vulnerability of the command-line interface of the Cisco Catalyst SD-WAN Manager allows a attacker to execute arbitrary code and elevate their privileges to root level.

🗓️ 08 Jun 2026 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Cisco Catalyst SD-WAN Manager CLI flaw enables arbitrary code execution and root privilege escalation from improper output encoding.

Reporter	Title	Published	Views	Family All 20
GithubExploit	Exploit for Improper Encoding or Escaping of Output in Cisco Catalyst_Sd-Wan_Manager	14 Jun 202610:23	–	githubexploit
GithubExploit	Exploit for Improper Encoding or Escaping of Output in Cisco Catalyst_Sd-Wan_Manager	10 Jun 202615:42	–	githubexploit
ATTACKERKB	CVE-2026-20245	4 Jun 202622:33	–	attackerkb
Circl	CVE-2026-20245	4 Jun 202621:00	–	circl
CISA KEV Catalog	Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability	9 Jun 202600:00	–	cisa_kev
CISA	CISA Adds Three Known Exploited Vulnerabilities to Catalog	9 Jun 202612:00	–	cisa
Tenable Nessus	Cisco Catalyst SD-WAN Controller, Catalyst SD-WAN Manager, and Catalyst SD-WAN Validator Authenticated Privilege Escalation (cisco-sa-sdwan-privesc-4uxFrdzx)	9 Jun 202600:00	–	nessus
CNNVD	Cisco Catalyst SD-WAN Manager 安全漏洞	4 Jun 202600:00	–	cnnvd
CVE	CVE-2026-20245	4 Jun 202622:33	–	cve
Cvelist	CVE-2026-20245 Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation Vulnerability	4 Jun 202622:33	–	cvelist

Source	Link
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-privesc-4uxFrdzx
cisa	www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv
web	www.web.nvd.nist.gov/view/vuln/detail
cisco	www.cisco.com/c/en/us/support/docs/csa/cisco-sa-sdwan-privesc-4uxFrdzx.html

10 Jun 2026 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 26.8

CVSS 37.8

EPSS0.09922

Command line interface Arbitrary code execution Root privilege escalation Output encoding Catalyst SD-WAN Manager