Cisco Catalyst SD-WAN Manager Vulnerability
Cisco Catalyst SD-WAN Manager contains a storing passwords in a recoverable format vulnerability that allows an authenticated, local attacker to gain DCA user privileges by accessing a credential file for the DCA user on the filesystem as a low-privileged user.
CVSS Score
9.8
CRITICAL
Published
20 Apr 2026 00:00
Modified
N/A
Vendor
Cisco
Product
Catalyst SD-WAN Manager
Source
CIRCL
Affected Versions
Fix
Vendor Patch / Mitigation Available
Weaknesses (CWE)
CWE-257
Affected Systems
Cisco
Catalyst SD-WAN Manager
Cisco
Secure Firewall Adaptive Security Appliance (ASA) And Secure Firewall Threat Defense (FTD)
Secure Firewall Management Center (FMC)
IOS
Unified Communications Manager
Catalyst SD-WAN Manager
Catalyst SD-WAN
Catalyst SD-WAN Manger
External Links
KEV Status
Known Exploited Vulnerability