VDB
CISCO-SA-SDWAN-AUTHBP-QWCX8D4V
CISCO-SA-SDWAN-AUTHBP-QWCX8D4V
PUBLISHED
CVSS 5.400000095367432 MEDIUM
Multiple vulnerabilities in Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an attacker to access an affected system, elevate privileges to root, gain access to sensitive information, and overwrite arbitrary files. For more information about these vulnerabilities, see the Details ["#details"] section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. Cisco strongly recommends that customers upgrade to the fixed software indicated in this advisory.
Risk Scores
CVSS 3.1
5.400000095367432
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco Catalyst SD-WAN Manager |
Timeline
- Feb 25, 2026 CVE Published
- Mar 18, 2026 CVE Updated
References
- https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html url
- https://www.cisco.com/c/en/us/products/routers/sd-wan/eos-eol-notice-listing.html url
- https://www.cisco.com/c/en/us/support/docs/routers/sd-wan/225525-internal-remediate-catalyst-sd-wan.html url
- https://www.cisco.com/c/en/us/support/docs/routers/sd-wan/216954-how-to-collect-an-admin-tech-in-an-sd-wa.html url
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v advisory
- https://bst.cisco.com/bugsearch/bug/CSCws33585 url
- https://sec.cloudapps.cisco.com/security/center/resources/Cisco-Catalyst-SD-WAN-HardeningGuide url
- https://bst.cisco.com/bugsearch/bug/CSCws33587 url
- https://bst.cisco.com/bugsearch/bug/CSCws93470 url
- https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes url
- https://www.cisco.com/c/dam/en/us/td/docs/Website/enterprise/catalyst_sdwan_compatibility_matrix/index.html url
- https://bst.cisco.com/bugsearch/bug/CSCws33584 url
- https://software.cisco.com fix
- https://bst.cisco.com/bugsearch/bug/CSCws33583 url
- http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html url
- https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html url
- https://bst.cisco.com/bugsearch/bug/CSCws33586 url
- https://www.cisco.com/c/en/us/td/docs/routers/sdwan/release/notes/compatibility-and-server-recommendations.html url
- https://www.cisco.com/c/dam/en/us/td/docs/Website/enterprise/catalyst-sdwan-upgrade-matrix/index.html url
- https://www.cisco.com/c/en/us/support/docs/routers/sd-wan/225526-rebuild-your-catalyst-sd-wan-fabric.html url
…and 3 more