SECURELYN
Free ScanFree consultation

CVE-2026-20133

A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system. This vulnerability is due to insufficient file system restrictions. An authenticated attacker with netadmin privileges could exploit this vulnerability by accessing the vshell of an affected system. A successful exploit could allow the attacker to read sensitive information on the underlying operating system.

Scores

7.5
CVSS 7.5 out of 10, high severity.
32.4%
EPSS 32.4% chance of exploitation in the next 30 days.

The facts

Published
25 February 2026
Last changed
17 June 2026
NVD status
Analyzed
Severity
High, CVSS 7.5 out of 10 (version 3.1)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness
Affects
  • cisco catalyst sd-wan manager
Known exploited
Yes. CISA added it to the Known Exploited Vulnerabilities catalogue on 20 April 2026.
EPSS
32.4% chance of exploitation activity in the next 30 days (percentile 98).

Is there a Securelyn advisory?

Not yet. Securelyn writes plain-English advisories for the flaws that matter most to businesses. Subscribe to the digest to hear about them.

References