Cisco Catalyst SD-WAN Controller Authentication Bypass

This module exploits an authentication bypass vulnerability CVE-2026-20127 in the Cisco Catalyst SD-WAN Controller vSmart. The vdaemon DTLS control-plane service fails to properly validate the verifystatus byte in CHALLENGEACKACK msgtype=10 messages. The vbondprocchallengeackack handler reads an...

CVE-2026-20087

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could...

CVE-2026-20090

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could...

CVE-2026-20085

A vulnerability in the web-based management interface of Cisco IMC could allow an unauthenticated, remote attacker to conduct a reflected XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by...

CVE-2026-20097

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to execute arbitrary code as the root user. This vulnerability is due to improper validation of user-supplied input to the web-based management interface. A...

CVE-2026-20174

A vulnerability in the Metadata update feature of Cisco Nexus Dashboard Insights could allow an authenticated, remote attacker to write arbitrary files to an affected system. This vulnerability is due to insufficient validation of the metadata update file. An attacker could exploit this...

CVE-2026-20096

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to perform command injection attacks on an affected system and execute arbitrary commands as the root user. This vulnerability is due to improper validation...

CVE-2026-20095

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to perform command injection attacks on an affected system and execute arbitrary commands as the root user. This vulnerability is due to improper validation...

CVE-2026-20041

A vulnerability in Cisco Nexus Dashboard and Cisco Nexus Dashboard Insights could allow an unauthenticated, remote attacker to conduct a server-side request forgery SSRF attack through an affected device. This vulnerability is due to improper input validation for specific HTTP requests. An attack...

CVE-2026-20089

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could...

CVE-2026-20151

A vulnerability in the web interface of Cisco Smart Software Manager On-Prem SSM On-Prem could allow an authenticated, remote attacker to elevate privileges on an affected system. This vulnerability is due to the improper transmission of sensitive user information. An attacker could exploit this...

CVE-2026-20042

A vulnerability in the configuration backup feature of Cisco Nexus Dashboard could allow an attacker who has the encryption password and access to Full or Config-only backup files to access sensitive information. This vulnerability exists because authentication details are included in the encrypt...

CVE-2026-20088

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could...

CVE-2026-20094

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with read-only privileges to perform command injection attacks on an affected system and execute arbitrary commands as the root user. This vulnerability is due to improper validation o...

CVE-2026-20087

creationtimestamp| type| source ---|---|--- 2026-04-02 02:00:06+00:00| seen| https://sec.cloudapps.cisco.com/security/center/publicationListing.x?product=Cisco&lastpublished=2026%20Apr&sort=-daysirVulnerabilities...

CVE-2026-20041

creationtimestamp| type| source ---|---|--- 2026-04-02 02:00:06+00:00| seen| https://sec.cloudapps.cisco.com/security/center/publicationListing.x?product=Cisco&lastpublished=2026%20Apr&sort=-daysirVulnerabilities...

CVE-2026-20085

creationtimestamp| type| source ---|---|--- 2026-04-02 02:00:06+00:00| seen| https://sec.cloudapps.cisco.com/security/center/publicationListing.x?product=Cisco&lastpublished=2026%20Apr&sort=-daysirVulnerabilities...

CVE-2026-20042

creationtimestamp| type| source ---|---|--- 2026-04-02 02:00:06+00:00| seen| https://sec.cloudapps.cisco.com/security/center/publicationListing.x?product=Cisco&lastpublished=2026%20Apr&sort=-daysirVulnerabilities...

CVE-2026-20089

creationtimestamp| type| source ---|---|--- 2026-04-02 02:00:06+00:00| seen| https://sec.cloudapps.cisco.com/security/center/publicationListing.x?product=Cisco&lastpublished=2026%20Apr&sort=-daysirVulnerabilities...

CVE-2026-20090

creationtimestamp| type| source ---|---|--- 2026-04-02 02:00:06+00:00| seen| https://sec.cloudapps.cisco.com/security/center/publicationListing.x?product=Cisco&lastpublished=2026%20Apr&sort=-daysirVulnerabilities...