CVE-2026-20224
Full vulnerability record from the local CVENow database.
Description
A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenticated, remote attacker to read arbitrary files that are stored in an affected system. The attacker does not need to have valid user credentials. This vulnerability is due to improper handling of XML External Entity (XXE) entries when parsing an XML file. An attacker could exploit this vulnerability by sending a crafted request to an affected system. A successful exploit could allow the attacker to read arbitrary files that are stored in the affected system.
Severity
HIGH
CVSS score
8.6
(v3.1)
Vulnerability status
Analyzed
Source identifier
Published
2026-05-14 17:16:20.353000
Last modified
2026-10-26 14:10:00.130000
View original CVE JSON
{
"id": "CVE-2026-20224",
"sourceIdentifier": "[email protected]",
"published": "2026-05-14T17:16:20.353",
"lastModified": "2026-10-26T14:10:00.130",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenticated, remote attacker to read arbitrary files that are stored in an affected system. The attacker does not need to have valid user credentials.\r\n\r\nThis vulnerability is due to improper handling of XML External Entity (XXE) entries when parsing an XML file. An attacker could exploit this vulnerability by sending a crafted request to an affected system. A successful exploit could allow the attacker to read arbitrary files that are stored in the affected system."
},
{
"lang": "es",
"value": "Una vulnerabilidad en la interfaz de usuario web de Cisco Catalyst SD-WAN Manager, anteriormente SD-WAN vManage, podría permitir a un atacante remoto no autenticado leer archivos arbitrarios que están almacenados en un sistema afectado. El atacante no necesita tener credenciales de usuario válidas.\n\nEsta vulnerabilidad se debe a un manejo inadecuado de entradas de Entidad Externa XML (XXE) al analizar un archivo XML. Un atacante podría explotar esta vulnerabilidad enviando una solicitud manipulada a un sistema afectado. Un exploit exitoso podría permitir al atacante leer archivos arbitrarios que están almacenados en el sistema afectado."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Cisco",
"product": "Cisco Catalyst SD-WAN Manager",
"defaultStatus": "unknown",
"versions": [
{
"version": "20.1.12",
"status": "affected"
},
{
"version": "19.2.1",
"status": "affected"
},
{
"version": "18.4.4",
"status": "affected"
},
{
"version": "18.4.5",
"status": "affected"
},
{
"version": "20.1.1.1",
"status": "affected"
},
{
"version": "20.1.1",
"status": "affected"
},
{
"version": "19.3.0",
"status": "affected"
},
{
"version": "19.2.2",
"status": "affected"
},
{
"version": "19.2.099",
"status": "affected"
},
{
"version": "18.3.6",
"status": "affected"
},
{
"version": "18.3.7",
"status": "affected"
},
{
"version": "19.2.0",
"status": "affected"
},
{
"version": "18.3.8",
"status": "affected"
},
{
"version": "19.0.0",
"status": "affected"
},
{
"version": "19.1.0",
"status": "affected"
},
{
"version": "18.4.302",
"status": "affected"
},
{
"version": "18.4.303",
"status": "affected"
},
{
"version": "19.2.097",
"status": "affected"
},
{
"version": "19.2.098",
"status": "affected"
},
{
"version": "17.2.10",
"status": "affected"
},
{
"version": "18.3.6.1",
"status": "affected"
},
{
"version": "19.0.1a",
"status": "affected"
},
{
"version": "18.2.0",
"status": "affected"
},
{
"version": "18.4.3",
"status": "affected"
},
{
"version": "18.4.1",
"status": "affected"
},
{
"version": "17.2.8",
"status": "affected"
},
{
"version": "18.3.3.1",
"status": "affected"
},
{
"version": "18.4.0",
"status": "affected"
},
{
"version": "18.3.1",
"status": "affected"
},
{
"version": "17.2.6",
"status": "affected"
},
{
"version": "17.2.9",
"status": "affected"
},
{
"version": "18.3.4",
"status": "affected"
},
{
"version": "17.2.5",
"status": "affected"
},
{
"version": "18.3.1.1",
"status": "affected"
},
{
"version": "18.3.5",
"status": "affected"
},
{
"version": "18.4.0.1",
"status": "affected"
},
{
"version": "18.3.3",
"status": "affected"
},
{
"version": "17.2.7",
"status": "affected"
},
{
"version": "17.2.4",
"status": "affected"
},
{
"version": "18.3.0",
"status": "affected"
},
{
"version": "19.2.3",
"status": "affected"
},
{
"version": "18.4.501_ES",
"status": "affected"
},
{
"version": "20.3.1",
"status": "affected"
},
{
"version": "20.1.2",
"status": "affected"
},
{
"version": "19.2.929",
"status": "affected"
},
{
"version": "19.2.31",
"status": "affected"
},
{
"version": "20.3.2",
"status": "affected"
},
{
"version": "19.2.32",
"status": "affected"
},
{
"version": "20.3.2_925",
"status": "affected"
},
{
"version": "20.3.2.1",
"status": "affected"
},
{
"version": "20.3.2.1_927",
"status": "affected"
},
{
"version": "18.4.6",
"status": "affected"
},
{
"version": "20.1.2_937",
"status": "affected"
},
{
"version": "20.4.1",
"status": "affected"
},
{
"version": "20.3.2_928",
"status": "affected"
},
{
"version": "20.3.2_929",
"status": "affected"
},
{
"version": "20.4.1.0.1",
"status": "affected"
},
{
"version": "20.3.2.1_930",
"status": "affected"
},
{
"version": "19.2.4",
"status": "affected"
},
{
"version": "20.5.0.1.1",
"status": "affected"
},
{
"version": "20.4.1.1",
"status": "affected"
},
{
"version": "20.3.3",
"status": "affected"
},
{
"version": "19.2.4.0.1",
"status": "affected"
},
{
"version": "20.3.2_937",
"status": "affected"
},
{
"version": "20.3.3.1",
"status": "affected"
},
{
"version": "20.5.1",
"status": "affected"
},
{
"version": "20.1.3",
"status": "affected"
},
{
"version": "20.3.3.0.4",
"status": "affected"
},
{
"version": "20.3.3.1.2",
"status": "affected"
},
{
"version": "20.3.3.1.1",
"status": "affected"
},
{
"version": "20.4.1.2",
"status": "affected"
},
{
"version": "20.3.3.0.2",
"status": "affected"
},
{
"version": "20.4.1.1.5",
"status": "affected"
},
{
"version": "20.4.1.0.01",
"status": "affected"
},
{
"version": "20.4.1.0.02",
"status": "affected"
},
{
"version": "20.3.3.1.7",
"status": "affected"
},
{
"version": "20.3.3.1.5",
"status": "affected"
},
{
"version": "20.5.1.0.1",
"status": "affected"
},
{
"version": "20.3.3.1.10",
"status": "affected"
},
{
"version": "20.3.3.0.8",
"status": "affected"
},
{
"version": "20.4.2",
"status": "affected"
},
{
"version": "20.4.2.0.1",
"status": "affected"
},
{
"version": "20.3.4",
"status": "affected"
},
{
"version": "20.3.3.0.14",
"status": "affected"
},
{
"version": "19.2.4.0.8",
"status": "affected"
},
{
"version": "19.2.4.0.9",
"status": "affected"
},
{
"version": "20.3.4.0.1",
"status": "affected"
},
{
"version": "20.3.2.0.5",
"status": "affected"
},
{
"version": "20.6.1",
"status": "affected"
},
{
"version": "20.5.1.0.2",
"status": "affected"
},
{
"version": "20.3.3.0.17",
"status": "affected"
},
{
"version": "20.6.1.1",
"status": "affected"
},
{
"version": "20.6.0.18.3",
"status": "affected"
},
{
"version": "20.3.2.0.6",
"status": "affected"
},
{
"version": "20.6.0.18.4",
"status": "affected"
},
{
"version": "20.4.2.0.2",
"status": "affected"
},
{
"version": "20.3.3.0.16",
"status": "affected"
},
{
"version": "20.3.4.0.5",
"status": "affected"
},
{
"version": "20.6.1.0.1",
"status": "affected"
},
{
"version": "20.3.4.0.6",
"status": "affected"
},
{
"version": "20.6.2",
"status": "affected"
},
{
"version": "20.7.1EFT2",
"status": "affected"
},
{
"version": "20.3.4.0.9",
"status": "affected"
},
{
"version": "20.3.4.0.11",
"status": "affected"
},
{
"version": "20.4.2.0.4",
"status": "affected"
},
{
"version": "20.3.3.0.18",
"status": "affected"
},
{
"version": "20.7.1",
"status": "affected"
},
{
"version": "20.6.2.1",
"status": "affected"
},
{
"version": "20.3.4.1",
"status": "affected"
},
{
"version": "20.5.1.1",
"status": "affected"
},
{
"version": "20.4.2.1",
"status": "affected"
},
{
"version": "20.4.2.1.1",
"status": "affected"
},
{
"version": "20.3.4.1.1",
"status": "affected"
},
{
"version": "20.3.813",
"status": "affected"
},
{
"version": "20.3.4.0.19",
"status": "affected"
},
{
"version": "20.4.2.2.1",
"status": "affected"
},
{
"version": "20.5.1.2",
"status": "affected"
},
{
"version": "20.3.4.2",
"status": "affected"
},
{
"version": "20.3.814",
"status": "affected"
},
{
"version": "20.4.2.2",
"status": "affected"
},
{
"version": "20.6.2.2",
"status": "affected"
},
{
"version": "20.3.4.2.1",
"status": "affected"
},
{
"version": "20.7.1.1",
"status": "affected"
},
{
"version": "20.3.4.1.2",
"status": "affected"
},
{
"version": "20.6.2.2.2",
"status": "affected"
},
{
"version": "20.3.4.0.20",
"status": "affected"
},
{
"version": "20.6.2.2.3",
"status": "affected"
},
{
"version": "20.4.2.2.2",
"status": "affected"
},
{
"version": "20.3.5",
"status": "affected"
},
{
"version": "20.6.2.0.4",
"status": "affected"
},
{
"version": "20.4.2.2.3",
"status": "affected"
},
{
"version": "20.3.4.0.24",
"status": "affected"
},
{
"version": "20.6.2.2.7",
"status": "affected"
},
{
"version": "20.6.3",
"status": "affected"
},
{
"version": "20.3.4.2.2",
"status": "affected"
},
{
"version": "20.4.2.2.4",
"status": "affected"
},
{
"version": "20.7.1.0.2",
"status": "affected"
},
{
"version": "20.8.1",
"status": "affected"
},
{
"version": "20.3.5.0.8",
"status": "affected"
},
{
"version": "20.3.5.0.9",
"status": "affected"
},
{
"version": "20.4.2.2.8",
"status": "affected"
},
{
"version": "20.3.5.0.7",
"status": "affected"
},
{
"version": "20.6.3.0.7",
"status": "affected"
},
{
"version": "20.6.3.0.5",
"status": "affected"
},
{
"version": "20.6.3.0.10",
"status": "affected"
},
{
"version": "20.6.3.0.2",
"status": "affected"
},
{
"version": "20.7.2",
"status": "affected"
},
{
"version": "20.9.1EFT2",
"status": "affected"
},
{
"version": "20.6.3.0.11",
"status": "affected"
},
{
"version": "20.6.3.1",
"status": "affected"
},
{
"version": "20.6.3.0.14",
"status": "affected"
},
{
"version": "20.6.4",
"status": "affected"
},
{
"version": "20.9.1",
"status": "affected"
},
{
"version": "20.6.3.0.19",
"status": "affected"
},
{
"version": "20.6.3.0.18",
"status": "affected"
},
{
"version": "20.3.6",
"status": "affected"
},
{
"version": "20.9.1.1",
"status": "affected"
},
{
"version": "20.6.3.0.23",
"status": "affected"
},
{
"version": "20.6.4.0.4",
"status": "affected"
},
{
"version": "20.6.3.0.25",
"status": "affected"
},
{
"version": "20.6.5",
"status": "affected"
},
{
"version": "20.6.3.0.27",
"status": "affected"
},
{
"version": "20.9.2",
"status": "affected"
},
{
"version": "20.9.2.1",
"status": "affected"
},
{
"version": "20.6.3.0.29",
"status": "affected"
},
{
"version": "20.6.3.0.31",
"status": "affected"
},
{
"version": "20.6.3.0.32",
"status": "affected"
},
{
"version": "20.10.1",
"status": "affected"
},
{
"version": "20.6.3.0.33",
"status": "affected"
},
{
"version": "20.9.2.0.01",
"status": "affected"
},
{
"version": "20.9.1_LI_Images",
"status": "affected"
},
{
"version": "20.10.1_LI_Images",
"status": "affected"
},
{
"version": "20.9.2_LI_Images",
"status": "affected"
},
{
"version": "20.3.7",
"status": "affected"
},
{
"version": "20.9.3",
"status": "affected"
},
{
"version": "20.6.5.1",
"status": "affected"
},
{
"version": "20.11.1",
"status": "affected"
},
{
"version": "20.11.1_LI_Images",
"status": "affected"
},
{
"version": "20.9.3_LI_ Images",
"status": "affected"
},
{
"version": "20.6.3.1.1",
"status": "affected"
},
{
"version": "20.9.3.0.2",
"status": "affected"
},
{
"version": "20.6.5.1.2",
"status": "affected"
},
{
"version": "20.9.3.0.3",
"status": "affected"
},
{
"version": "20.4.2.3",
"status": "affected"
},
{
"version": "20.6.3.2",
"status": "affected"
},
{
"version": "20.6.4.1",
"status": "affected"
},
{
"version": "20.6.3.0.38",
"status": "affected"
},
{
"version": "20.6.3.0.39",
"status": "affected"
},
{
"version": "20.3.5.1",
"status": "affected"
},
{
"version": "20.3.4.3",
"status": "affected"
},
{
"version": "20.9.3.1",
"status": "affected"
},
{
"version": "20.3.3.2",
"status": "affected"
},
{
"version": "20.6.5.2",
"status": "affected"
},
{
"version": "20.3.7.1",
"status": "affected"
},
{
"version": "20.10.1.1",
"status": "affected"
},
{
"version": "20.6.5.2.1",
"status": "affected"
},
{
"version": "20.3.4.0.25",
"status": "affected"
},
{
"version": "20.6.2.2.4",
"status": "affected"
},
{
"version": "20.6.1.2",
"status": "affected"
},
{
"version": "20.11.1.1",
"status": "affected"
},
{
"version": "20.9.3.0.5",
"status": "affected"
},
{
"version": "20.3.4.0.26",
"status": "affected"
},
{
"version": "20.6.5.1.3",
"status": "affected"
},
{
"version": "20.6.3.0.40",
"status": "affected"
},
{
"version": "20.1.3.1",
"status": "affected"
},
{
"version": "20.9.2.2",
"status": "affected"
},
{
"version": "20.6.5.2.3",
"status": "affected"
},
{
"version": "20.6.5.1.4",
"status": "affected"
},
{
"version": "20.6.5.3",
"status": "affected"
},
{
"version": "20.6.3.0.41",
"status": "affected"
},
{
"version": "20.9.3.0.7",
"status": "affected"
},
{
"version": "20.6.5.1.5",
"status": "affected"
},
{
"version": "20.9.3.0.4",
"status": "affected"
},
{
"version": "20.6.4.0.19",
"status": "affected"
},
{
"version": "20.6.5.1.6",
"status": "affected"
},
{
"version": "20.9.3.0.8",
"status": "affected"
},
{
"version": "20.6.3.3",
"status": "affected"
},
{
"version": "20.3.7.2",
"status": "affected"
},
{
"version": "20.6.5.4",
"status": "affected"
},
{
"version": "20.6.5.1.7",
"status": "affected"
},
{
"version": "20.9.3.0.12",
"status": "affected"
},
{
"version": "20.6.4.2",
"status": "affected"
},
{
"version": "20.6.5.5",
"status": "affected"
},
{
"version": "20.9.3.2",
"status": "affected"
},
{
"version": "20.11.1.2",
"status": "affected"
},
{
"version": "20.6.3.4",
"status": "affected"
},
{
"version": "20.10.1.2",
"status": "affected"
},
{
"version": "20.6.5.1.9",
"status": "affected"
},
{
"version": "20.9.3.0.16",
"status": "affected"
},
{
"version": "20.6.3.0.45",
"status": "affected"
},
{
"version": "20.6.5.1.10",
"status": "affected"
},
{
"version": "20.9.3.0.17",
"status": "affected"
},
{
"version": "20.6.5.2.4",
"status": "affected"
},
{
"version": "20.6.4.0.21",
"status": "affected"
},
{
"version": "20.9.3.0.18",
"status": "affected"
},
{
"version": "20.6.3.0.46",
"status": "affected"
},
{
"version": "20.6.3.0.47",
"status": "affected"
},
{
"version": "20.9.2.3",
"status": "affected"
},
{
"version": "20.9.3.2_LI_Images",
"status": "affected"
},
{
"version": "20.9.3.0.21",
"status": "affected"
},
{
"version": "20.9.3.0.20",
"status": "affected"
},
{
"version": "20.9.4_LI_Images",
"status": "affected"
},
{
"version": "20.9.4",
"status": "affected"
},
{
"version": "20.6.5.1.11",
"status": "affected"
},
{
"version": "20.12.1",
"status": "affected"
},
{
"version": "20.12.1_LI_Images",
"status": "affected"
},
{
"version": "20.6.5.1.13",
"status": "affected"
},
{
"version": "20.9.3.0.23",
"status": "affected"
},
{
"version": "20.6.5.2.8",
"status": "affected"
},
{
"version": "20.9.4.1",
"status": "affected"
},
{
"version": "20.9.4.1_LI_Images",
"status": "affected"
},
{
"version": "20.9.3.0.25",
"status": "affected"
},
{
"version": "20.9.3.0.24",
"status": "affected"
},
{
"version": "20.6.5.1.14",
"status": "affected"
},
{
"version": "20.3.8",
"status": "affected"
},
{
"version": "20.6.6",
"status": "affected"
},
{
"version": "20.9.3.0.26",
"status": "affected"
},
{
"version": "20.6.3.0.51",
"status": "affected"
},
{
"version": "20.9.3.0.29",
"status": "affected"
},
{
"version": "20.12.2",
"status": "affected"
},
{
"version": "20.12.2_LI_Images",
"status": "affected"
},
{
"version": "20.6.6.0.1",
"status": "affected"
},
{
"version": "20.13.1_LI_Images",
"status": "affected"
},
{
"version": "20.9.4.0.4",
"status": "affected"
},
{
"version": "20.13.1",
"status": "affected"
},
{
"version": "20.9.4.1.1",
"status": "affected"
},
{
"version": "20.9.5",
"status": "affected"
},
{
"version": "20.9.5_LI_Images",
"status": "affected"
},
{
"version": "20.12.3_LI_Images",
"status": "affected"
},
{
"version": "20.12.3",
"status": "affected"
},
{
"version": "20.9.4.1.3",
"status": "affected"
},
{
"version": "20.6.7",
"status": "affected"
},
{
"version": "20.9.5.1",
"status": "affected"
},
{
"version": "20.9.5.1_LI_Images",
"status": "affected"
},
{
"version": "20.9.4.1.6",
"status": "affected"
},
{
"version": "20.14.1",
"status": "affected"
},
{
"version": "20.14.1_LI_Images",
"status": "affected"
},
{
"version": "20.9.5.2",
"status": "affected"
},
{
"version": "20.9.5.2.1",
"status": "affected"
},
{
"version": "20.9.5.2_LI_Images",
"status": "affected"
},
{
"version": "20.12.3.1",
"status": "affected"
},
{
"version": "20.12.4",
"status": "affected"
},
{
"version": "20.15.1_LI_Images",
"status": "affected"
},
{
"version": "20.15.1",
"status": "affected"
},
{
"version": "20.9.5.1.4",
"status": "affected"
},
{
"version": "20.9.5.2.7",
"status": "affected"
},
{
"version": "20.9.5.2.13",
"status": "affected"
},
{
"version": "20.9.6",
"status": "affected"
},
{
"version": "20.9.6_LI_Images",
"status": "affected"
},
{
"version": "20.9.5.2.14",
"status": "affected"
},
{
"version": "20.6.8",
"status": "affected"
},
{
"version": "20.12.4.0.03",
"status": "affected"
},
{
"version": "20.16.1",
"status": "affected"
},
{
"version": "20.16.1_LI_Images",
"status": "affected"
},
{
"version": "20.12.4_LI_Images",
"status": "affected"
},
{
"version": "20.9.5.2.16",
"status": "affected"
},
{
"version": "20.12.4.0.4",
"status": "affected"
},
{
"version": "20.12.401",
"status": "affected"
},
{
"version": "20.9.5.3",
"status": "affected"
},
{
"version": "20.9.5.3_LI_Images",
"status": "affected"
},
{
"version": "20.12.4.1_LI_Images",
"status": "affected"
},
{
"version": "20.12.4.1",
"status": "affected"
},
{
"version": "20.9.5.2.21",
"status": "affected"
},
{
"version": "20.9.6.0.3",
"status": "affected"
},
{
"version": "20.12.4.0.6",
"status": "affected"
},
{
"version": "20.15.2_LI_Images",
"status": "affected"
},
{
"version": "20.15.2",
"status": "affected"
},
{
"version": "20.12.4_Monthly_ES5",
"status": "affected"
},
{
"version": "20.12.5",
"status": "affected"
},
{
"version": "20.12.5_LI_Images",
"status": "affected"
},
{
"version": "20.9.7_LI _Images",
"status": "affected"
},
{
"version": "20.9.7",
"status": "affected"
},
{
"version": "20.15.3",
"status": "affected"
},
{
"version": "20.15.3_ LI _Images",
"status": "affected"
},
{
"version": "20.12.501",
"status": "affected"
},
{
"version": "20.12.5.1_LI_Images",
"status": "affected"
},
{
"version": "20.12.5.1",
"status": "affected"
},
{
"version": "20.12.5.2_LI_Images",
"status": "affected"
},
{
"version": "20.12.5.2",
"status": "affected"
},
{
"version": "20.15.3.1",
"status": "affected"
},
{
"version": "20.15.4_LI_Images",
"status": "affected"
},
{
"version": "20.15.4",
"status": "affected"
},
{
"version": "20.9.7.1_LI _Images",
"status": "affected"
},
{
"version": "20.9.7.1",
"status": "affected"
},
{
"version": "20.18.1",
"status": "affected"
},
{
"version": "20.18.1_LI_Images",
"status": "affected"
},
{
"version": "20.12.6_LI_Images",
"status": "affected"
},
{
"version": "20.12.6",
"status": "affected"
},
{
"version": "20.12.5.1.01",
"status": "affected"
},
{
"version": "26.0.1",
"status": "affected"
},
{
"version": "20.9.8",
"status": "affected"
},
{
"version": "20.9.8_LI_Images",
"status": "affected"
},
{
"version": "20.18.2",
"status": "affected"
},
{
"version": "20.15.4.1_LI_Images",
"status": "affected"
},
{
"version": "20.15.4.1",
"status": "affected"
},
{
"version": "20.18.2_LI_Images",
"status": "affected"
},
{
"version": "26.1.1",
"status": "affected"
},
{
"version": "26.1.1_LI_Images",
"status": "affected"
},
{
"version": "20.18.2.1_LI_Images",
"status": "affected"
},
{
"version": "20.18.2.1",
"status": "affected"
},
{
"version": "20.15.4.2_LI_Images",
"status": "affected"
},
{
"version": "20.15.4.2",
"status": "affected"
},
{
"version": "20.12.6.1",
"status": "affected"
},
{
"version": "20.12.6.1_LI_Images",
"status": "affected"
},
{
"version": "20.12.5.3",
"status": "affected"
},
{
"version": "20.12.5.3_LI_Images",
"status": "affected"
},
{
"version": "20.9.8.2_LI_Images",
"status": "affected"
},
{
"version": "20.9.8.2",
"status": "affected"
},
{
"version": "20.18.3",
"status": "affected"
},
{
"version": "20.18.3_LI_Images",
"status": "affected"
},
{
"version": "20.15.5",
"status": "affected"
},
{
"version": "20.15.5_LI_Images",
"status": "affected"
},
{
"version": "20.12.7",
"status": "affected"
},
{
"version": "20.12.7_LI_Images",
"status": "affected"
},
{
"version": "20.9.9",
"status": "affected"
},
{
"version": "20.9.9_LI_Images",
"status": "affected"
},
{
"version": "20.18.2.2",
"status": "affected"
},
{
"version": "20.18.2.2_LI_Images",
"status": "affected"
},
{
"version": "20.12.5.4",
"status": "affected"
},
{
"version": "20.12.5.4_LI_ Images",
"status": "affected"
},
{
"version": "20.12.7.1_LI_Images",
"status": "affected"
},
{
"version": "20.12.6.2_LI_Images",
"status": "affected"
},
{
"version": "20.12.7.1",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 4.0
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-05-14T18:29:43.192282Z",
"id": "CVE-2026-20224",
"options": [
{
"exploitation": "none"
},
{
"automatable": "yes"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-20"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
"versionEndExcluding": "20.9.9.1",
"matchCriteriaId": "5021D679-E23A-4D7F-B3B6-D664634A639C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "20.10",
"versionEndExcluding": "20.12.5.4",
"matchCriteriaId": "26022018-2273-4589-BE4F-AD92DA31CB58"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "20.12.6",
"versionEndExcluding": "20.12.6.2",
"matchCriteriaId": "FDA5CA36-86B6-443D-B772-37A5901F3E83"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "20.13",
"versionEndExcluding": "20.15.4.4",
"matchCriteriaId": "32A83687-B363-476B-89EF-B35C82575237"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "20.15.5",
"versionEndExcluding": "20.15.5.2",
"matchCriteriaId": "709D0805-4B76-46A0-82D3-93C89926B389"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "20.16",
"versionEndExcluding": "20.18.2.2",
"matchCriteriaId": "BB6A9216-3D47-4B33-B502-72B99859992E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "26.1",
"versionEndExcluding": "26.1.1.1",
"matchCriteriaId": "C34C0AB2-3E8E-4B12-BEA2-446F8F248B9A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.12.7:*:*:*:*:*:*:*",
"matchCriteriaId": "6A03BCEF-DC25-488D-91D3-0A16F3B872E3"
}
]
}
]
}
],
"references": [
{
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-mltvnps2-JxpWm7R",
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa-EHchtZk",
"source": "[email protected]",
"tags": [
"Not Applicable"
]
}
]
}