CVE-2026-20182 Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

🗓️ 14 May 2026 16:08:25Reported by ciscoType

Unauthenticated attacker bypasses auth on Cisco Catalyst SD WAN Controller and Manager to gain admin privileges via NETCONF.

Reporter	Title	Published	Views	Family All 30
GithubExploit	Exploit for Improper Authentication in Cisco Catalyst_Sd-Wan_Manager	15 May 202614:07	–	githubexploit
GithubExploit	Exploit for Improper Authentication in Cisco Catalyst_Sd-Wan_Manager	22 May 202621:17	–	githubexploit
GithubExploit	Exploit for Improper Authentication in Cisco Catalyst_Sd-Wan_Manager	26 May 202618:10	–	githubexploit
ATTACKERKB	CVE-2026-20182	14 May 202616:08	–	attackerkb
BDU FSTEC	The vulnerability of the centralized network management system of Cisco Catalyst SD-WAN Manager and the software for traffic management of Cisco Catalyst SD-WAN Controller, due to authentication mechanism flaws, allows attackers to gain unauthorized access to the system.	15 May 202600:00	–	bdu_fstec
Circl	CVE-2026-20182	14 May 202611:33	–	circl
CISA KEV Catalog	Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability	14 May 202600:00	–	cisa_kev
CISA	CISA Adds One Known Exploited Vulnerability to Catalog	14 May 202612:00	–	cisa
CISA	CISA and Partners Release Guidance for Ongoing Global Exploitation of Cisco SD-WAN Systems	14 May 202612:00	–	cisa
Cisco	Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability	14 May 202616:00	–	cisco

Source	Link
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SW
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa-EHchtZk

16 Jun 2026 17:57Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.110

EPSS0.91522

SSVC