731 matches found
CVE-2026-20131-POC
CVE-2026-20131---Cisco-SD-WAN-Preauth-RCE Cisco SD-WAN 零日漏洞 CVE-2026-20131 自 2023 年起被利用以获取管理员访问权限。 本仓库包含针对 CVE-2026-20131 的可运行概念验证（PoC）漏洞利用代码。该漏洞是 Cisco Catalyst SD-WAN Controller（原 vSmart）和 Catalyst SD-WAN Manager（原 vManage）中的一个严重预认证漏洞，自 2023 年以来已在野外被积极利用。 该漏洞自 2023 年以来已在野外被积极利用。 被 Cisco...
cve-2026-20127
CVE-2026-20127 扫描器 概述 该项目是一个基于 Windows 的网络扫描工具，使用 C++ 编写，旨在识别潜在的 Cisco SD-WAN / vManage 类服务，并针对标记为 CVE-2026-20127 的引用问题执行漏洞检查。 功能 IP 范围扫描（起始 IP → 结束 IP） 针对 Cisco SD-WAN / vManage 特征的服务指纹识别 HTTP 响应头与响应体分析 向疑似管理端点发送测试请求 根据响应内容与状态码检测潜在暴露风险 简单的交互式 CLI 界面 对敏感端点执行二次请求： /dataservice/client/admin/setting...
CVE-2026-20127-Cisco-SD-WAN-Preauth-RCE
CVE-2026-20127-Cisco SD-WAN Ejecución Remota de Código Pre-Autenticación Descripción General Este repositorio contiene un exploit de prueba de concepto PoC para CVE-2026-20127 , una vulnerabilidad crítica de ejecución remota de código RCE pre-autenticación que afecta a implementaciones de Cisco...
sdwan-scanner-CVE-2026-20127
Cisco SD-WAN 暴露扫描器（CVE-2026-20127） 一款专门的被动指纹识别工具，用于识别面向互联网的 Cisco SD-WAN（vManage / Viptela）实例。该工具通过检测潜在暴露的管理接口和 NETCONF 端口，帮助安全研究人员和系统管理员管理其外部攻击面。 🚀 功能特性 多端口分析 ：扫描常见 SD-WAN 端口，包括 22（SSH）、443（HTTPS）和 830（NETCONF）。 HTTP/HTTPS 指纹识别 ：检测页面标题和 Server 头中的 "vManage"、"Viptela" 和 "Cisco SD-WAN"。 SSL/TLS 检查...
Cisco Catalyst SD-WAN Controller vHub Authentication Bypass
This module exploits an authentication bypass vulnerability CVE-2026-20182 in the Cisco Catalyst SD-WAN Controller. The vdaemon DTLS control-plane service performs no certificate or credential verification for connecting peers that claim to be a vHub device type 2. The vbondprocchallengeack...
Rapid7 Analysis: CVE-2026-20127
CVE-2026-20127: Cisco Catalyst SD-WAN Authentication Bypass Overview On 25th February 2026, Cisco published an advisory for CVE-2026-20127, a critical authentication bypass vulnerability in the vdaemon service of Cisco Catalyst SD-WAN formerly Viptela. The flaw allows an unauthenticated, remote...
Exploit for Improper Authentication in Cisco Catalyst_Sd-Wan_Manager
CVE-2026-20127-Cisco SD-WAN Pre-Authentication Remote Code Exe...
Exploit for CVE-2026-20131
CVE-2026-20127---Cisco-SD-WAN-Preauth-RCE Cisco SD-WAN Zero-...
VulnCheck KEV: CVE-2026-20122
A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite arbitrary files on the local file system. To exploit this vulnerability, the attacker must have valid read-only credentials with API access on the affected system. This...
CVE-2026-20128
A vulnerability in the Data Collection Agent DCA feature of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain DCA user privileges on an affected system. This vulnerability is due to the presence of a credential file for the DCA user on an affected system. An...
EUVD-2026-8673
A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite arbitrary files on the local file system. To exploit this vulnerability, the attacker must have valid read-only credentials with API access on the affected system. This...
EUVD-2026-8676
A vulnerability in the Data Collection Agent DCA feature of Cisco Catalyst SD-WAN Manager could allow an authenticated, local attacker to gain DCA user privileges on an affected system. To exploit this vulnerability, the attacker must have valid vmanage credentials on the affected system. This...
CVE-2026-20128
A vulnerability in the Data Collection Agent DCA feature of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain DCA user privileges on an affected system. This vulnerability is due to the presence of a credential file for the DCA user on an affected system. An...
CVE-2026-20128
A vulnerability in the Data Collection Agent DCA feature of Cisco Catalyst SD-WAN Manager could allow an authenticated, local attacker to gain DCA user privileges on an affected system. To exploit this vulnerability, the attacker must have valid vmanage credentials on the affected system. This...
CVE-2026-20122 Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability
A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite arbitrary files on the local file system. To exploit this vulnerability, the attacker must have valid read-only credentials with API access on the affected system. This...
CVE-2026-20122
A vulnerability in the API of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to overwrite arbitrary files on the local file system. To exploit this vulnerability, the attacker must have valid read-only credentials with API access on the affected system. This...
CVE-2026-20128 Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability
A vulnerability in the Data Collection Agent DCA feature of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain DCA user privileges on an affected system. This vulnerability is due to the presence of a credential file for the DCA user on an affected system. An...
CVE-2026-20128
A vulnerability in the Data Collection Agent DCA feature of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain DCA user privileges on an affected system. This vulnerability is due to the presence of a credential file for the DCA user on an affected system. An...
PT-2026-21952
Name of the Vulnerable Software and Affected Versions Cisco Catalyst SD-WAN Manager affected versions not specified Description An issue in the API of Cisco Catalyst SD-WAN Manager, specifically within the Data Collection Agent DCA service, results from improper file handling and the incorrect us...