SECURELYN
Free ScanFree consultation

CVE-2026-20182

May 2026: This security advisory provides the details and fix information for a vulnerability that was discovered and fixed after the was disclosed in February 2026. This new advisory is for a new vulnerability in the control connection handshaking. The section of this advisory includes Show Control Connections guidance to help with system checks.  A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an unaut…

Scores

10.0
CVSS 10.0 out of 10, critical severity.
91.8%
EPSS 91.8% chance of exploitation in the next 30 days.

The facts

Published
14 May 2026
Last changed
17 June 2026
NVD status
Analyzed
Severity
Critical, CVSS 10.0 out of 10 (version 3.1)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Weakness
Affects
  • cisco catalyst sd-wan manager
  • cisco sd-wan vbond orchestrator
  • cisco sd-wan vsmart controller
Known exploited
Yes. CISA added it to the Known Exploited Vulnerabilities catalogue on 14 May 2026.
EPSS
91.8% chance of exploitation activity in the next 30 days (percentile 100).

Is there a Securelyn advisory?

Not yet. Securelyn writes plain-English advisories for the flaws that matter most to businesses. Subscribe to the digest to hear about them.

References