# Cisco Catalyst Sd-Wan Manager


- [CVE-2026-20182](https://insights.sbomify.com/CVE-2026-20182/): Cisco Catalyst SD-WAN Controller Authentication Bypass (critical 10.0, exploited in the wild)
- [CVE-2026-20127](https://insights.sbomify.com/CVE-2026-20127/): Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass (critical 10.0, exploited in the wild)
- [CVE-2026-76504](https://insights.sbomify.com/CVE-2026-76504/): Cisco Catalyst SD-WAN Manager Hex Encoding (critical 9.8, exploited in the wild)
- [CVE-2026-20245](https://insights.sbomify.com/CVE-2026-20245/): Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output (high 7.8, exploited in the wild)
- [CVE-2022-20775](https://insights.sbomify.com/CVE-2022-20775/): Cisco SD-WAN Path Traversal (high 7.8, exploited in the wild)
- [CVE-2026-20128](https://insights.sbomify.com/CVE-2026-20128/): Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format (high 7.5, exploited in the wild)
- [CVE-2026-20262](https://insights.sbomify.com/CVE-2026-20262/): Cisco Catalyst SD-WAN Manager Directory or Path Traversal (medium 6.5, exploited in the wild)
- [CVE-2026-20133](https://insights.sbomify.com/CVE-2026-20133/): Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor (medium 6.5, exploited in the wild)
- [CVE-2026-20122](https://insights.sbomify.com/CVE-2026-20122/): Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs (medium 5.4, exploited in the wild)
- [CVE-2026-20129](https://insights.sbomify.com/CVE-2026-20129/): Cisco Catayst SD-WAN Authentication Bypass Vulnerability (critical 9.8)
- [CVE-2023-20252](https://insights.sbomify.com/CVE-2023-20252/): Auth bypass in Cisco SD-WAN vManage (critical 9.8)
- [CVE-2021-1275](https://insights.sbomify.com/CVE-2021-1275/): Cisco SD-WAN vManage Software Vulnerabilities (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/products/cisco/catalyst-sd-wan-manager/