SECURELYN
Free ScanFree consultation

CVE-2026-20245

A vulnerability in the CLI of Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an authenticated, local attacker to execute arbitrary commands as root by supplying a crafted file to the affected system. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by uploading a crafted file to the affected system. A successful exploit could allow the attacker to perform command injection attacks on…

Scores

7.8
CVSS 7.8 out of 10, high severity.
25.3%
EPSS 25.3% chance of exploitation in the next 30 days.

The facts

Published
4 June 2026
Last changed
23 July 2026
NVD status
Analyzed
Severity
High, CVSS 7.8 out of 10 (version 3.1)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
Affects
  • cisco catalyst sd-wan manager
  • cisco sd-wan vsmart controller
Known exploited
Yes. CISA added it to the Known Exploited Vulnerabilities catalogue on 9 June 2026.
EPSS
25.3% chance of exploitation activity in the next 30 days (percentile 98).

Is there a Securelyn advisory?

Not yet. Securelyn writes plain-English advisories for the flaws that matter most to businesses. Subscribe to the digest to hear about them.

References