Threat intelligence / Vulnerability
CVE-2026-20128
Cisco Catalyst SD-WAN Manager contains a storing passwords in a recoverable format vulnerability that allows an authenticated, local attacker to gain DCA user privileges by accessing a credential file for the DCA user on the filesystem as a low-privileged user.
Vulnerability
TypeVulnerability
External ID—
First seen2026-04-20
Last seen2026-04-20
Confidence
—
Cisco Catalyst SD-WAN Manager contains a storing passwords in a recoverable format vulnerability that allows an authenticated, local attacker to gain DCA user privileges by accessing a credential file for the DCA user on the filesystem as a low-privileged user.
Labels
CISA KEV context
Vendor / productCisco Catalyst SD-WAN Manager
Added2026-04-20
Due date2026-04-23
2 recorded
Relationships
2 external