Cisco Catalyst SD-WAN Manager (vManage) Security Advisories & Vulnerabilities
Recent Cisco PSIRT advisories affecting Catalyst SD-WAN Manager (formerly vManage) and the SD-WAN fabric. Search, check severity and CVSS, and get a remediation or refresh quote from an authorized Cisco partner.
27 recent advisories affecting Cisco Catalyst SD-WAN Manager (vManage)
Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
Critical · CVSS 10CVE-2026-20182Published May 14, 2026cisco-sa-sdwan-rpa2-v69WY2SWAffected: Cisco Catalyst SD-WAN Manager , Cisco Catalyst SD-WAN Controller
Cisco Catalyst SD-WAN Manager Vulnerabilities
Critical · CVSS 8.6CVE-2026-20209, CVE-2026-20210, CVE-2026-20224Published May 14, 2026cisco-sa-sdwan-mltvnps2-JxpWm7RAffected: Cisco Catalyst SD-WAN Manager
Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
Critical · CVSS 10CVE-2026-20127Published Feb 25, 2026cisco-sa-sdwan-rpa-EHchtZkAffected: Cisco Catalyst SD-WAN Manager
Cisco Catalyst SD-WAN Vulnerabilities
Critical · CVSS 9.8CVE-2026-20122, CVE-2026-20126, CVE-2026-20128, CVE-2026-20129 +1Published Feb 25, 2026cisco-sa-sdwan-authbp-qwCX8D4vAffected: Cisco Catalyst SD-WAN Manager
Cisco Catalyst SD-WAN Manager Vulnerabilities
Critical · CVSS 9.8CVE-2023-20034, CVE-2023-20252, CVE-2023-20253, CVE-2023-20254 +1Published Sep 27, 2023cisco-sa-sdwan-vman-sc-LRLfu2zAffected: Cisco SD-WAN Solution , Cisco SD-WAN vManage , Cisco SD-WAN vSmart
Cisco SD-WAN vManage Unauthenticated REST API Access Vulnerability
Critical · CVSS 9.1CVE-2023-20214Published Jul 12, 2023cisco-sa-vmanage-unauthapi-sphCLYPAAffected: Cisco SD-WAN vManage
Cisco IOS XE SD-WAN Software Buffer Overflow Vulnerability
Critical · CVSS 9.8CVE-2021-34727Published Sep 22, 2021cisco-sa-iosxesdwan-rbuffover-vE2OB6tpAffected: Cisco IOS XE Catalyst SD-WAN 16.11.1a, Cisco IOS XE Catalyst SD-WAN 16.11.1b, Cisco IOS XE Catalyst SD-WAN 16.11.1f, Cisco IOS XE Catalyst SD-WAN 16.12.1b, Cisco IOS XE Catalyst SD-WAN 16.12.1d, Cisco IOS XE Catalyst SD-WAN 16.12.1e, and 2 more
Cisco IOS XE Software NETCONF and RESTCONF Authentication Bypass Vulnerability
Critical · CVSS 9.8CVE-2021-1619Published Sep 22, 2021cisco-sa-aaa-Yx47ZT8QAffected: Cisco IOS XE Software 16.3.1, Cisco IOS XE Software 16.3.2, Cisco IOS XE Software 16.3.3, Cisco IOS XE Software 16.3.1a, Cisco IOS XE Software 16.3.4, Cisco IOS XE Software 16.3.5, and 137 more
Cisco SD-WAN vManage Software Vulnerabilities
Critical · CVSS 9.8CVE-2021-1275, CVE-2021-1468, CVE-2021-1505, CVE-2021-1506 +1Published May 5, 2021cisco-sa-sd-wan-vmanage-4TbynnhZAffected: Cisco Catalyst SD-WAN Manager
Cisco Catalyst SD-WAN Controller, Catalyst SD-WAN Manager, and Catalyst SD-WAN Validator Authenticated Privilege Escalation Vulnerability
High · CVSS 7.8CVE-2026-20245Published Jun 4, 2026cisco-sa-sdwan-privesc-4uxFrdzxAffected: Cisco Catalyst SD-WAN Manager , Cisco Catalyst SD-WAN Controller
Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability
High · CVSS 7.7CVE-2025-20352Published Sep 24, 2025cisco-sa-snmp-x4LPhteAffected: Cisco IOS 12.2(55)SE, Cisco IOS 12.2(55)SE3, Cisco IOS 12.2(55)SE2, Cisco IOS 12.2(58)SE, Cisco IOS 12.2(55)SE1, Cisco IOS 12.2(58)SE1, and 1057 more
Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability
High · CVSS 7.8CVE-2025-20122Published May 7, 2025cisco-sa-sdwan-priviesc-WCk7bmmtAffected: Cisco Catalyst SD-WAN Manager
Cisco Catalyst SD-WAN Routers Denial of Service Vulnerability
High · CVSS 8.6CVE-2024-20455Published Sep 25, 2024cisco-sa-sdwan-utd-dos-hDATqxsAffected: Cisco IOS XE Catalyst SD-WAN , Cisco IOS XE Software 17.1.1, Cisco IOS XE Software 17.1.1a, Cisco IOS XE Software 17.1.1s, Cisco IOS XE Software 17.1.2, Cisco IOS XE Software 17.1.1t, and 91 more
Remote Unauthenticated Code Execution Vulnerability in OpenSSH Server (regreSSHion): July 2024
High · CVSS 8.1CVE-2024-6387Published Jul 2, 2024cisco-sa-openssh-rce-2024Affected: Cisco Catalyst SD-WAN , Cisco Catalyst SD-WAN Manager , Cisco Catalyst SD-WAN Controller
Cisco IOS XE SD-WAN Software Command Injection Vulnerability
High · CVSS 7.8CVE-2023-20035Published Mar 22, 2023cisco-sa-ios-xe-sdwan-VQAhEjYwAffected: Cisco IOS XE Software 16.12.8, Cisco IOS XE Software 16.12.4, Cisco IOS XE Software 16.12.4a, Cisco IOS XE Software 16.12.5, Cisco IOS XE Software 16.12.6, Cisco IOS XE Software 16.12.5a, and 75 more
Cisco SD-WAN Software Privilege Escalation Vulnerabilities
High · CVSS 7.8CVE-2022-20775, CVE-2022-20818Published Sep 28, 2022cisco-sa-sd-wan-priv-E6e8tEdFAffected: Cisco Catalyst SD-WAN , Cisco Catalyst SD-WAN Manager , Cisco SD-WAN vEdge Router , Cisco SD-WAN vEdge Cloud , Cisco SD-WAN vContainer
Cisco SD-WAN vManage Software Unauthenticated Access to Messaging Services Vulnerability
High · CVSS 7.5CVE-2022-20696Published Sep 7, 2022cisco-sa-vmanage-msg-serv-AqTup7vsAffected: Cisco Catalyst SD-WAN Manager
Vulnerability in NVIDIA Data Plane Development Kit Affecting Cisco Products: August 2022
High · CVSS 8.6CVE-2022-28199Published Sep 7, 2022cisco-sa-mlx5-jbPCrqD8Affected: Cisco Secure Firewall Adaptive Security Appliance (ASA) Software , Cisco Secure Firewall Threat Defense (FTD) Software , Cisco IOS XE Catalyst SD-WAN , Cisco IOS XE Software 17.6.1, Cisco IOS XE Software 17.6.2, Cisco IOS XE Software 17.6.1a, and 7 more
Cisco SD-WAN Solution Improper Access Control Vulnerability
High · CVSS 7.8CVE-2022-20716Published Apr 13, 2022cisco-sa-sd-wan-file-access-VW36d28PAffected: Cisco Catalyst SD-WAN , Cisco Catalyst SD-WAN Manager , Cisco SD-WAN vEdge Router , Cisco SD-WAN vEdge Cloud
Cisco SD-WAN vManage Software Privilege Escalation Vulnerability
High · CVSS 7.3CVE-2022-20739Published Apr 13, 2022cisco-sa-sdwan-privesc-vman-tEJFpBSLAffected: Cisco SD-WAN vManage
Multiple Cisco Products CLI Command Injection Vulnerability
High · CVSS 8.8CVE-2022-20655Published Jan 19, 2022cisco-sa-cli-cmdinj-4MttWZPBAffected: Cisco IOS XR Software , Cisco Virtual Topology System (VTS) , Cisco Network Services Orchestrator , Cisco Enterprise NFV Infrastructure Software , Cisco Catalyst SD-WAN , Cisco Catalyst SD-WAN Manager , and 12 more
Cisco IOS XE SD-WAN Software Command Injection Vulnerability
High · CVSS 7.8CVE-2021-1529Published Oct 20, 2021cisco-sa-sd-wan-rhpbE34AAffected: Cisco IOS XE Software 17.2.1r, Cisco IOS XE Software 17.2.1v, Cisco IOS XE Software 17.2.2, Cisco IOS XE Software 17.3.1, Cisco IOS XE Software 17.3.2, Cisco IOS XE Software 17.3.3, and 34 more
Cisco SD-WAN Software Privilege Escalation Vulnerability
High · CVSS 7.8CVE-2021-1528Published Jun 2, 2021cisco-sa-sd-wan-fuErCWwFAffected: Cisco Catalyst SD-WAN , Cisco Catalyst SD-WAN Manager , Cisco SD-WAN vEdge Router , Cisco SD-WAN vEdge Cloud , Cisco SD-WAN vContainer
Cisco SD-WAN vManage Software Authentication Bypass Vulnerability
High · CVSS 8.8CVE-2021-1284Published May 5, 2021cisco-sa-sdw-auth-bypass-65aYqcS2Affected: Cisco Catalyst SD-WAN Manager
Cisco SD-WAN Software vDaemon Denial of Service Vulnerability
High · CVSS 7.5CVE-2021-1513Published May 5, 2021cisco-sa-sdwan-dos-Ckn5cVqWAffected: Cisco Catalyst SD-WAN , Cisco Catalyst SD-WAN Manager , Cisco SD-WAN vEdge Router , Cisco SD-WAN vEdge Cloud , Cisco SD-WAN vContainer
Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability
Medium · CVSS 6.5CVE-2026-20262Published Jun 15, 2026cisco-sa-sdwan-arbfw-c2rZvQAffected: Cisco Catalyst SD-WAN Manager
Cisco Catalyst SD-WAN Manager Cross-Site Scripting Vulnerability
Medium · CVSS 5.4CVE-2026-20108Published Mar 25, 2026cisco-sa-vmanage-xss-ZqkhP9W9Affected: Cisco Catalyst SD-WAN Manager
Find out which Cisco vulnerabilities affect your Cisco Catalyst SD-WAN Manager (vManage)
Send your device list, PIDs, or serials and an authorized Cisco partner will map them to current PSIRT advisories, flag what is end-of-life, and return the patch or refresh path — GPC-payable, with TAA-compliant options. No cost, no obligation.
- Affected CVEs & severity
- Fixed release or replacement
- End-of-life check
- GPC-payable quote
Frequently asked questions
What are the latest Cisco Catalyst SD-WAN Manager (vManage) security advisories?
This page lists recent Cisco security advisories affecting Cisco Catalyst SD-WAN Manager (vManage), from the Cisco PSIRT openVuln feed, with severity, CVSS, and CVEs. Confirm the affected software versions against what you run.
How do I fix a Cisco Catalyst SD-WAN Manager (vManage) vulnerability?
Most Cisco vulnerabilities are fixed by upgrading to a patched software release or applying the documented mitigation. If the platform is end-of-life, the remedy is a refresh. Uniqcli, an authorized Cisco partner, scopes the patch or replacement and can quote it TAA-compliant and GPC-payable.
Is Cisco Catalyst SD-WAN Manager (vManage) still supported?
Security fixes are only available while a product is supported. Check our Cisco end-of-life lookup to confirm the Last Date of Support, then patch (if supported) or plan a refresh with Uniqcli.
Data from the Cisco PSIRT openVuln API, shown for reference; Cisco’s official advisories are authoritative. Cisco and PSIRT are trademarks of Cisco Systems, Inc.; Uniqcli LLC is an independent authorized Cisco partner.
