Cisco Catalyst SD-WAN Controller, Catalyst SD-WAN Manager, and Catalyst SD-WAN Validator Authenticated Privilege Escalation Vulnerability

A vulnerability in the CLI of Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an authenticated, local attacker to execute arbitrary commands as root by supplyi...

CVE-2026-20182

creationtimestamp| type| source ---|---|--- 2026-05-14 11:33:33+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/cisco-security-advisory-av26-471 2026-05-14 15:45:20+00:00| seen| https://thehackernews.com/2026/05/cisco-catalyst-sd-wan-controller-auth.html 2026-05-14 16:24:10+00:00| seen|...

Cisco Catalyst SD-WAN Controller vHub Authentication Bypass

This module exploits an authentication bypass vulnerability CVE-2026-20182 in the Cisco Catalyst SD-WAN Controller. The vdaemon DTLS control-plane service performs no certificate or credential verification for connecting peers that claim to be a vHub device type 2. The vbondprocchallengeack...