CVE-2026-20209
Medium · 5.4CVSS
5.4
EPSS
0.2%
Published
May 14, 2026
CISA due date
—
The record
A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker with read-only permissions to elevate their privileges from low to high and perform actions as a high-privileged user. This vulnerability exists because sensitive session information is recorded in audit logs. An attacker could exploit this vulnerability by elevating their read-only permissions in Cisco Catalyst SD-WAN Manager to those of a high-privileged user. A successful exploit could allow the attacker to perform actions as a high-privileged user.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-20210 A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage… CWE-779
- GHSA-xp4f-g2cm-rhg7 PocketMine-MP has LogDoS by many junk properties in client data JWT in LoginPacket CWE-779
- CVE-2026-28718 Denial of service due to insufficient input validation in authentication logging. CWE-779
- CVE-2025-69230 AIOHTTP Vulnerable to Cookie Parser Warning Storm CWE-779