Search/CVE-2026-20133
● CVE — Medium

CVE-2026-20133

VendorciscoProductcatalyst sd-wan managerDiscoveredFeb 25, 2026UpdatedApr 22, 2026

A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system. This vulnerability is due to insufficient file system restrictions. An authenticated attacker with netadmin privileges could exploit this vulnerability by accessing the vshell of an affected system. A successful exploit could allow the attacker to read sensitive information on the underlying operating system.

CVSS v3.1
6.5 MEDIUM
EPSS
31.5%
probability of exploitation in 30 days
CISA KEV
Listed
confirmed active exploitation
News coverage
1
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Oct 24, 2026
▲ 0.13pp
31.4% → 31.5% over 4 tracked changes
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityNONE
AvailabilityNONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Connections
3 relationships
Timeline
disclosure → media coverage
Feb 25, 2026
Disclosure — published as a CVE record. · last revised by NVD Apr 22, 2026
Apr 21, 2026
helpnetsecurity.com reports: CISA flags another Cisco Catalyst SD-WAN Manager bug as exploited (CVE-2026-20133)