CVE-2026-20182: Critical authentication bypass in Cisco Catalyst SD-WAN Controller (FIXED)

🗓️ 14 May 2026 16:00:00Reported by Jonah BurgessType

rapid7blog🔗 www.rapid7.com👁 21 Views

CVE-2026-20182 enables remote authentication bypass in Cisco Catalyst SD-WAN Controller via vdaemon DTLS.

Reporter	Title	Published	Views	Family All 30
GithubExploit	Exploit for Improper Authentication in Cisco Catalyst_Sd-Wan_Manager	15 May 202614:07	–	githubexploit
GithubExploit	Exploit for Improper Authentication in Cisco Catalyst_Sd-Wan_Manager	22 May 202621:17	–	githubexploit
GithubExploit	Exploit for Improper Authentication in Cisco Catalyst_Sd-Wan_Manager	26 May 202618:10	–	githubexploit
ATTACKERKB	CVE-2026-20182	14 May 202616:08	–	attackerkb
BDU FSTEC	The vulnerability of the centralized network management system of Cisco Catalyst SD-WAN Manager and the software for traffic management of Cisco Catalyst SD-WAN Controller, due to authentication mechanism flaws, allows attackers to gain unauthorized access to the system.	15 May 202600:00	–	bdu_fstec
Circl	CVE-2026-20182	14 May 202611:33	–	circl
CISA KEV Catalog	Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability	14 May 202600:00	–	cisa_kev
CISA	CISA Adds One Known Exploited Vulnerability to Catalog	14 May 202612:00	–	cisa
CISA	CISA and Partners Release Guidance for Ongoing Global Exploitation of Cisco SD-WAN Systems	14 May 202612:00	–	cisa
Cisco	Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability	14 May 202616:00	–	cisco

14 May 2026 16:00Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.110

EPSS0.91522

SSVC

Cisco Catalyst SD-WAN authentication bypass vdaemon DTLS remote attacker privileged access