VulnCheck KEV: CVE-2026-76504

Cisco Catalyst SD-WAN Manager contains a hex encoding vulnerability that could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user due to improper handling of URI encoding in an HTTP request...

PT-2026-103270

Name of the Vulnerable Software and Affected Versions Cisco Catalyst SD-WAN Manager versions prior to 20.9.10.1 Cisco Catalyst SD-WAN Manager versions prior to 20.12.8.2 Cisco Catalyst SD-WAN Manager versions prior to 20.15.6.1 Cisco Catalyst SD-WAN Manager versions prior to 20.18.4.1 Cisco...

Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability

Cisco Catalyst SD-WAN Manager contains a hex encoding vulnerability that could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user due to improper handling of URI encoding in an HTTP request...

CVE-2022-20818

CVE-2022-20818: Local Privilege Escalation via Partial File Read in Cisco SD-WAN The “config - load” feature from Viptela SSH shell uses “wget” to fetch remote “command” files over FTP. By hosting a malicious FTP server and replacing the local files created by wget with symlinks, an attacker can...

CVE-2026-20182

CVE-2026-20182 Cisco Catalyst SD-WAN ピアリング認証バイパス CVE-2026-20182 — Cisco Catalyst SD-WAN ピアリング認証バイパス Cisco Catalyst SD-WAN Controller / Manager のピアリング認証バイパス CVE-2026-20182 を、許可を得た環境でテストするための評価ツールです。 | ---|--- CVE| CVE-2026-20182 深刻度| 緊急 CVSS 10.0 CVSS 3.1| AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H 製品|...

CVE-2026-20127

🛡️ CVE-2026-20127 — Cisco Catalyst SD-WAN Authentication Bypass 📌 Overview CVE-2026-20127 is a critical authentication bypass vulnerability affecting Cisco Catalyst SD-WAN components, including controllers and management systems. A remote unauthenticated attacker can exploit improper authenticatio...

CVE-2026-20245

🚨 CVE-2026-20245 - Cisco Catalyst SD-WAN Manager Privilege Escalation Authenticated Privilege Escalation via Crafted File Upload A vulnerability affecting Cisco Catalyst SD-WAN Manager that allows authenticated attackers with administrative privileges to execute arbitrary commands as root. 📖...

CVE-2026-20182

CVE-2026-20182 — Cisco Catalyst SD-WAN Controller / Manager Authentication Bypass A proof-of-concept exploit for CVE-2026-20182 , a critical CVSS 10.0 authentication bypass in the vdaemon DTLS service UDP/12346 on Cisco Catalyst SD-WAN Controller vSmart and Manager vManage. Disclosed: May 14, 202...

CVE-2018-6961

CVE-2018-6961 Exploit in Python3 VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web UI component. This component is disabled by default and should not be enabled on untrusted networks. VeloCloud by VMware will be removing this...

CVE-2026-20127

CVE-2026-20127 — Cisco SD-WAN における認証バイパス（CVSS 10.0） 目次 | セクション| 内容 ---|---|--- 01| SD-WAN クラッシュコース| これを理解する前に学ぶ必要があった基礎 — アーキテクチャ、NETCONF、ピアリング認証の仕組み 02| バウンサーの問題| 認証コードがどこで壊れるのか — 正常系パスと異常系パス、そしてようやく腑に落ちた比喩 03| 最初の試み、最初の失敗| エクスプロイトを理解する最初の試み — 動く！…ような気がする。壁にぶつかる。 04| ひらめきの瞬間| 全体を解き明かす鍵となる洞察 —...

sdwan-harvester

SD-WAN Harvester 🌐 SD-WAN インターネットセンサスフレームワーク 免責事項 このプロジェクトはもはやメンテナンスされていません。安定しており、SD-WAN スキャンには今でも使用できます。しかし、現在、インターネット上のさまざまなもの（SD-WAN ソリューションだけでなく）をスキャンする、より好ましく正確な方法は、新しい Grinder Framework を使用することです。 🔎 Grinder Framework 目次 1. 説明 2. スライド 3. 要件 4. インストール 5. 使用方法 コマンドライン引数 使用例 説明 SD-WAN Harveste...

CVE-2026-20127_EXP

CVE-2026-20127EXP Cisco Catalyst SD-WAN 身份验证绕过漏洞CVE-2026-20127漏洞利用EXP 基本用法 python scan.py -f targets.txt 显示详细信息 python scan.py -f targets.txt -v 调整线程数并保存结果 python scan.py -f targets.txt -t 10 -o vulnerable.txt 指定WAR文件路径 python scan.py -f targets.txt -w cmd.war 指定WAR文件路径调整线程并保存结果 python scan.py -f...

Extreme Network Fabric Engine < 9.3 Authentication Bypass (SA-2025-115)

The version of Extreme Networks Fabric Engine installed on the remote host is missing a security update. It is, therefore, affected by an authentication bypass vulnerability. - A vulnerability in Extreme Networks Fabric Engine VOSS before 9.3 was discovered. When SD-WAN AutoSense is enabled on a...

CVE-2026-76707

A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to view some system memory contents. Successful exploitation could allow an attacker to gain insight into internal services and workflows, increasing the risk of unauthorized access and...

CVE-2026-76706

A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to obtain sensitive information. Successful exploitation could result in the disclosure of security-relevant configuration details and security feature status, whic...

CVE-2026-76705

A buffer overflow vulnerability exists in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated remote attacker with Admin privilege to execute arbitrary commands on the underlying operating system...

CVE-2026-76701

A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated remote attacker to access sensitive information. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access to netwo...

CVE-2026-76703

A buffer overflow vulnerability exists in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways that could allow an authenticated attacker with administrative access to cause a denial of service. Successful exploitation could allow an attacker to disrupt system...

CVE-2026-76698

A command injection vulnerability exists in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways. An authenticated remote attacker with limited access privileges could exploit this vulnerability through specially crafted input. Successful exploitation, under certain...

CVE-2026-76704

A vulnerability in the web-based management interface of the EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to execute arbitrary script code in a victim's browser in the context of the affected interface. Successful exploitation could allow an attacker to access...