Uniqcli

Cisco Catalyst SD-WAN Manager (vManage) Security Advisories & Vulnerabilities

Recent Cisco PSIRT advisories affecting Catalyst SD-WAN Manager (formerly vManage) and the SD-WAN fabric. Search, check severity and CVSS, and get a remediation or refresh quote from an authorized Cisco partner.

27 recent advisories affecting Cisco Catalyst SD-WAN Manager (vManage)

  • Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

    Critical · CVSS 10
    CVE-2026-20182Published May 14, 2026cisco-sa-sdwan-rpa2-v69WY2SW

    Affected: Cisco Catalyst SD-WAN Manager , Cisco Catalyst SD-WAN Controller

  • Cisco Catalyst SD-WAN Manager Vulnerabilities

    Critical · CVSS 8.6
    CVE-2026-20209, CVE-2026-20210, CVE-2026-20224Published May 14, 2026cisco-sa-sdwan-mltvnps2-JxpWm7R

    Affected: Cisco Catalyst SD-WAN Manager

  • Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

    Critical · CVSS 10
    CVE-2026-20127Published Feb 25, 2026cisco-sa-sdwan-rpa-EHchtZk

    Affected: Cisco Catalyst SD-WAN Manager

  • Cisco Catalyst SD-WAN Vulnerabilities

    Critical · CVSS 9.8
    CVE-2026-20122, CVE-2026-20126, CVE-2026-20128, CVE-2026-20129 +1Published Feb 25, 2026cisco-sa-sdwan-authbp-qwCX8D4v

    Affected: Cisco Catalyst SD-WAN Manager

  • Cisco Catalyst SD-WAN Manager Vulnerabilities

    Critical · CVSS 9.8
    CVE-2023-20034, CVE-2023-20252, CVE-2023-20253, CVE-2023-20254 +1Published Sep 27, 2023cisco-sa-sdwan-vman-sc-LRLfu2z

    Affected: Cisco SD-WAN Solution , Cisco SD-WAN vManage , Cisco SD-WAN vSmart

  • Cisco SD-WAN vManage Unauthenticated REST API Access Vulnerability

    Critical · CVSS 9.1
    CVE-2023-20214Published Jul 12, 2023cisco-sa-vmanage-unauthapi-sphCLYPA

    Affected: Cisco SD-WAN vManage

  • Cisco IOS XE SD-WAN Software Buffer Overflow Vulnerability

    Critical · CVSS 9.8
    CVE-2021-34727Published Sep 22, 2021cisco-sa-iosxesdwan-rbuffover-vE2OB6tp

    Affected: Cisco IOS XE Catalyst SD-WAN 16.11.1a, Cisco IOS XE Catalyst SD-WAN 16.11.1b, Cisco IOS XE Catalyst SD-WAN 16.11.1f, Cisco IOS XE Catalyst SD-WAN 16.12.1b, Cisco IOS XE Catalyst SD-WAN 16.12.1d, Cisco IOS XE Catalyst SD-WAN 16.12.1e, and 2 more

  • Cisco IOS XE Software NETCONF and RESTCONF Authentication Bypass Vulnerability

    Critical · CVSS 9.8
    CVE-2021-1619Published Sep 22, 2021cisco-sa-aaa-Yx47ZT8Q

    Affected: Cisco IOS XE Software 16.3.1, Cisco IOS XE Software 16.3.2, Cisco IOS XE Software 16.3.3, Cisco IOS XE Software 16.3.1a, Cisco IOS XE Software 16.3.4, Cisco IOS XE Software 16.3.5, and 137 more

  • Cisco SD-WAN vManage Software Vulnerabilities

    Critical · CVSS 9.8
    CVE-2021-1275, CVE-2021-1468, CVE-2021-1505, CVE-2021-1506 +1Published May 5, 2021cisco-sa-sd-wan-vmanage-4TbynnhZ

    Affected: Cisco Catalyst SD-WAN Manager

  • Cisco Catalyst SD-WAN Controller, Catalyst SD-WAN Manager, and Catalyst SD-WAN Validator Authenticated Privilege Escalation Vulnerability

    High · CVSS 7.8
    CVE-2026-20245Published Jun 4, 2026cisco-sa-sdwan-privesc-4uxFrdzx

    Affected: Cisco Catalyst SD-WAN Manager , Cisco Catalyst SD-WAN Controller

  • Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability

    High · CVSS 7.7
    CVE-2025-20352Published Sep 24, 2025cisco-sa-snmp-x4LPhte

    Affected: Cisco IOS 12.2(55)SE, Cisco IOS 12.2(55)SE3, Cisco IOS 12.2(55)SE2, Cisco IOS 12.2(58)SE, Cisco IOS 12.2(55)SE1, Cisco IOS 12.2(58)SE1, and 1057 more

  • Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability

    High · CVSS 7.8
    CVE-2025-20122Published May 7, 2025cisco-sa-sdwan-priviesc-WCk7bmmt

    Affected: Cisco Catalyst SD-WAN Manager

  • Cisco Catalyst SD-WAN Routers Denial of Service Vulnerability

    High · CVSS 8.6
    CVE-2024-20455Published Sep 25, 2024cisco-sa-sdwan-utd-dos-hDATqxs

    Affected: Cisco IOS XE Catalyst SD-WAN , Cisco IOS XE Software 17.1.1, Cisco IOS XE Software 17.1.1a, Cisco IOS XE Software 17.1.1s, Cisco IOS XE Software 17.1.2, Cisco IOS XE Software 17.1.1t, and 91 more

  • Remote Unauthenticated Code Execution Vulnerability in OpenSSH Server (regreSSHion): July 2024

    High · CVSS 8.1
    CVE-2024-6387Published Jul 2, 2024cisco-sa-openssh-rce-2024

    Affected: Cisco Catalyst SD-WAN , Cisco Catalyst SD-WAN Manager , Cisco Catalyst SD-WAN Controller

  • Cisco IOS XE SD-WAN Software Command Injection Vulnerability

    High · CVSS 7.8
    CVE-2023-20035Published Mar 22, 2023cisco-sa-ios-xe-sdwan-VQAhEjYw

    Affected: Cisco IOS XE Software 16.12.8, Cisco IOS XE Software 16.12.4, Cisco IOS XE Software 16.12.4a, Cisco IOS XE Software 16.12.5, Cisco IOS XE Software 16.12.6, Cisco IOS XE Software 16.12.5a, and 75 more

  • Cisco SD-WAN Software Privilege Escalation Vulnerabilities

    High · CVSS 7.8
    CVE-2022-20775, CVE-2022-20818Published Sep 28, 2022cisco-sa-sd-wan-priv-E6e8tEdF

    Affected: Cisco Catalyst SD-WAN , Cisco Catalyst SD-WAN Manager , Cisco SD-WAN vEdge Router , Cisco SD-WAN vEdge Cloud , Cisco SD-WAN vContainer

  • Cisco SD-WAN vManage Software Unauthenticated Access to Messaging Services Vulnerability

    High · CVSS 7.5
    CVE-2022-20696Published Sep 7, 2022cisco-sa-vmanage-msg-serv-AqTup7vs

    Affected: Cisco Catalyst SD-WAN Manager

  • Vulnerability in NVIDIA Data Plane Development Kit Affecting Cisco Products: August 2022

    High · CVSS 8.6
    CVE-2022-28199Published Sep 7, 2022cisco-sa-mlx5-jbPCrqD8

    Affected: Cisco Secure Firewall Adaptive Security Appliance (ASA) Software , Cisco Secure Firewall Threat Defense (FTD) Software , Cisco IOS XE Catalyst SD-WAN , Cisco IOS XE Software 17.6.1, Cisco IOS XE Software 17.6.2, Cisco IOS XE Software 17.6.1a, and 7 more

  • Cisco SD-WAN Solution Improper Access Control Vulnerability

    High · CVSS 7.8
    CVE-2022-20716Published Apr 13, 2022cisco-sa-sd-wan-file-access-VW36d28P

    Affected: Cisco Catalyst SD-WAN , Cisco Catalyst SD-WAN Manager , Cisco SD-WAN vEdge Router , Cisco SD-WAN vEdge Cloud

  • Cisco SD-WAN vManage Software Privilege Escalation Vulnerability

    High · CVSS 7.3
    CVE-2022-20739Published Apr 13, 2022cisco-sa-sdwan-privesc-vman-tEJFpBSL

    Affected: Cisco SD-WAN vManage

  • Multiple Cisco Products CLI Command Injection Vulnerability

    High · CVSS 8.8
    CVE-2022-20655Published Jan 19, 2022cisco-sa-cli-cmdinj-4MttWZPB

    Affected: Cisco IOS XR Software , Cisco Virtual Topology System (VTS) , Cisco Network Services Orchestrator , Cisco Enterprise NFV Infrastructure Software , Cisco Catalyst SD-WAN , Cisco Catalyst SD-WAN Manager , and 12 more

  • Cisco IOS XE SD-WAN Software Command Injection Vulnerability

    High · CVSS 7.8
    CVE-2021-1529Published Oct 20, 2021cisco-sa-sd-wan-rhpbE34A

    Affected: Cisco IOS XE Software 17.2.1r, Cisco IOS XE Software 17.2.1v, Cisco IOS XE Software 17.2.2, Cisco IOS XE Software 17.3.1, Cisco IOS XE Software 17.3.2, Cisco IOS XE Software 17.3.3, and 34 more

  • Cisco SD-WAN Software Privilege Escalation Vulnerability

    High · CVSS 7.8
    CVE-2021-1528Published Jun 2, 2021cisco-sa-sd-wan-fuErCWwF

    Affected: Cisco Catalyst SD-WAN , Cisco Catalyst SD-WAN Manager , Cisco SD-WAN vEdge Router , Cisco SD-WAN vEdge Cloud , Cisco SD-WAN vContainer

  • Cisco SD-WAN vManage Software Authentication Bypass Vulnerability

    High · CVSS 8.8
    CVE-2021-1284Published May 5, 2021cisco-sa-sdw-auth-bypass-65aYqcS2

    Affected: Cisco Catalyst SD-WAN Manager

  • Cisco SD-WAN Software vDaemon Denial of Service Vulnerability

    High · CVSS 7.5
    CVE-2021-1513Published May 5, 2021cisco-sa-sdwan-dos-Ckn5cVqW

    Affected: Cisco Catalyst SD-WAN , Cisco Catalyst SD-WAN Manager , Cisco SD-WAN vEdge Router , Cisco SD-WAN vEdge Cloud , Cisco SD-WAN vContainer

  • Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability

    Medium · CVSS 6.5
    CVE-2026-20262Published Jun 15, 2026cisco-sa-sdwan-arbfw-c2rZvQ

    Affected: Cisco Catalyst SD-WAN Manager

  • Cisco Catalyst SD-WAN Manager Cross-Site Scripting Vulnerability

    Medium · CVSS 5.4
    CVE-2026-20108Published Mar 25, 2026cisco-sa-vmanage-xss-ZqkhP9W9

    Affected: Cisco Catalyst SD-WAN Manager

Free exposure report

Find out which Cisco vulnerabilities affect your Cisco Catalyst SD-WAN Manager (vManage)

Send your device list, PIDs, or serials and an authorized Cisco partner will map them to current PSIRT advisories, flag what is end-of-life, and return the patch or refresh path — GPC-payable, with TAA-compliant options. No cost, no obligation.

  • Affected CVEs & severity
  • Fixed release or replacement
  • End-of-life check
  • GPC-payable quote
Check end-of-life

Frequently asked questions

What are the latest Cisco Catalyst SD-WAN Manager (vManage) security advisories?

This page lists recent Cisco security advisories affecting Cisco Catalyst SD-WAN Manager (vManage), from the Cisco PSIRT openVuln feed, with severity, CVSS, and CVEs. Confirm the affected software versions against what you run.

How do I fix a Cisco Catalyst SD-WAN Manager (vManage) vulnerability?

Most Cisco vulnerabilities are fixed by upgrading to a patched software release or applying the documented mitigation. If the platform is end-of-life, the remedy is a refresh. Uniqcli, an authorized Cisco partner, scopes the patch or replacement and can quote it TAA-compliant and GPC-payable.

Is Cisco Catalyst SD-WAN Manager (vManage) still supported?

Security fixes are only available while a product is supported. Check our Cisco end-of-life lookup to confirm the Last Date of Support, then patch (if supported) or plan a refresh with Uniqcli.

Data from the Cisco PSIRT openVuln API, shown for reference; Cisco’s official advisories are authoritative. Cisco and PSIRT are trademarks of Cisco Systems, Inc.; Uniqcli LLC is an independent authorized Cisco partner.