A vulnerability in Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to view sensitive information on an affected system.
This vulnerability is due to insufficient file system access restrictions. An attacker could exploit this vulnerability by accessing the API of an affected system. A successful exploit could allow the attacker to read sensitive information on the underlying operating system.
Metrics
Affected Vendors & Products
References
History
Fri, 27 Feb 2026 05:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Thu, 26 Feb 2026 13:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Cisco
Cisco catalyst Sd-wan Manager |
|
| Vendors & Products |
Cisco
Cisco catalyst Sd-wan Manager |
Wed, 25 Feb 2026 17:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A vulnerability in Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to view sensitive information on an affected system. This vulnerability is due to insufficient file system access restrictions. An attacker could exploit this vulnerability by accessing the API of an affected system. A successful exploit could allow the attacker to read sensitive information on the underlying operating system. | |
| Title | Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability | |
| Weaknesses | CWE-200 | |
| References |
| |
| Metrics |
cvssV3_1
|
Status: PUBLISHED
Assigner: cisco
Published: 2026-02-25T16:13:56.017Z
Updated: 2026-02-25T19:05:52.915Z
Reserved: 2025-10-08T11:59:15.380Z
Link: CVE-2026-20133
Updated: 2026-02-25T18:17:58.540Z
Status : Awaiting Analysis
Published: 2026-02-25T17:25:30.983
Modified: 2026-02-27T14:06:59.787
Link: CVE-2026-20133
No data.