H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeVulnerability
External ID—
First seen2026-04-20
Last seen2026-04-20

Confidence

—

Cisco Catalyst SD-WAN Manager contains an incorrect use of privileged APIs vulnerability due to improper file handling on the API interface of an affected system. An attacker could exploit this vulnerability by uploading a malicious file on the local file system. A successful exploit could allow the attacker to overwrite arbitrary files on the affected system and gain vmanage user privileges.

Labels

exploitedkev

CISA KEV context

Vendor / productCisco Catalyst SD-WAN Manger
Added2026-04-20
Due date2026-04-23
3 recorded

Relationships

mitigatesMitigation
related-toTechnique
related-toTechnique
2 external

References

nvd
CVE-2026-20122
open
cwe
CWE-648
open