Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability

🗓️ 20 Apr 2026 00:00:00Reported by CISAType

cisa_kev

cisa_kev🔗 www.cisa.gov👁 10 Views

Catalyst SD-WAN Manager stores recoverable passwords, enabling attackers to access DCA credentials.

Reporter	Title	Published	Views	Family All 23
ATTACKERKB	CVE-2026-20128	25 Feb 202616:14	–	attackerkb
BDU FSTEC	The vulnerability of the Data Collection Agent service in the Cisco Catalyst SD-WAN Manager centralized network management system allows a malicious actor to gain unauthorized access to protected information and enhance their privileges.	27 Feb 202600:00	–	bdu_fstec
Circl	CVE-2026-20128	25 Feb 202616:34	–	circl
CISA	CISA Adds Eight Known Exploited Vulnerabilities to Catalog	20 Apr 202612:00	–	cisa
Cisco	Cisco Catalyst SD-WAN Vulnerabilities	25 Feb 202616:00	–	cisco
Tenable Nessus	Cisco Catalyst SD-WAN Vulnerabilities (cisco-sa-sdwan-authbp-qwCX8D4v)	26 Feb 202600:00	–	nessus
Tenable Nessus	Cisco Catalyst SD-WAN Manager < 20.18 Multiple Vulnerabilities (cisco-sa-sdwan-authbp-qwCX8D4v)	26 Feb 202600:00	–	nessus
CNNVD	Cisco Catalyst SD-WAN Manager（Cisco SD-WAN vManage）安全漏洞	25 Feb 202600:00	–	cnnvd
CVE	CVE-2026-20128	25 Feb 202616:14	–	cve
Cvelist	CVE-2026-20128 Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability	25 Feb 202616:14	–	cvelist

20 Apr 2026 00:00Current

7.6High risk

Vulners AI Score7.6

CVSS 3.17.5

EPSS0.05269

SSVC

Catalyst Manager recoverable passwords credential file local attacker DCA credentials privilege escalation