AdvisorycriticalExploited in the wild

CISA Adds Cisco SD-WAN CVE-2026

The Hacker Newsby @TheHackersNewsMay 15, 2026 · 00:00 UTC (May 15, 2026)2 min read1

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2026-20182 CVE-2026-20127 CVE-2026-20133 CVE-2026-20128 CVE-2026-20122

Tags: advisory cve-2026-20122 cve-2026-20127 cve-2026-20128 cve-2026-20133 cve-2026-20182

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2026-20122	Arbitrary File Overwrite via Privileged APIs in Cisco Catalyst SD-WAN Manager	5.4	26%	KEV	Feb 25, 2026 KEV Apr 20, 2026
CVE-2026-20127	Authentication Bypass in Cisco Catalyst SD-WAN Controller, Manager, Validator	10.0	89%	KEV	Feb 25, 2026 KEV Feb 25, 2026
CVE-2026-20133 +1 related CVE CVE-2026-20128	Actively Exploited Information Disclosure in Cisco Catalyst SD-WAN Manager	7.5	31%	KEV	Feb 25, 2026 KEV Apr 20, 2026
CVE-2026-20182	Authentication Bypass in Cisco Catalyst SD-WAN Control Components	10.0	92%	KEV	May 14, 2026 KEV May 14, 2026

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  May 15, 2026 Vulnerability / Credential Theft The U. S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a newly disclosed vulnerability impacting Cisco Catalyst SD-WAN Controller to its Known Exploited Vulnerabilities (KEV) catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to remediate the issue by May 17, 2026.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.