CVE Tools
Track your stack

CVE-2026-20182: Critical authentication bypass in Cisco Catalyst SD-WAN Controller (FIXED)

Rapid7 BlogBy Rapid713 min read

PatchCisco Catalyst SD-WAN Controller (vSmart)
Read at Rapid7 Blog

Below is the opening; the full story is at Rapid7 Blog.

From Rapid7 Blog

Overview

While researching a critical authentication bypass vulnerability, CVE-2026-20127, which was exploited in-the-wild, Rapid7 Labs discovered a new authentication bypass vulnerability affecting Cisco Catalyst SD-WAN Controller (formerly known as vSmart), CVE-2026-20182.…

Continue at Rapid7 Blog
  1. SecurityWeekCisco SD-WAN Zero-Day Exploited Months Before PatchingCVE-2026-20127, CVE-2026-20182
  2. The Hacker NewsCisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited to Gain Root AccessCVE-2026-20127, CVE-2026-20182
  3. BleepingComputerMandiant reveals how Cisco SD-WAN zero-day attacks gained root accessCVE-2026-20127, CVE-2026-20182
  4. Dark ReadingAttackers Hit Cisco SD-WAN Flaw 2 Months Before DisclosureCVE-2026-20127, CVE-2026-20182
  5. SecurityWeekCisco Patches Another SD-WAN Zero-Day Exploited in AttacksCVE-2026-20127, CVE-2026-20182
  6. The Hacker NewsCisco Releases Security Updates for Actively Exploited SD-WAN Manager FlawCVE-2026-20127, CVE-2026-20182
  7. The Hacker NewsCisco Catalyst SD-WAN Manager CVE-2026-20245 Flaw Actively Exploited – No Patch AvailableCVE-2026-20127, CVE-2026-20182
  8. BleepingComputerCisco warns of unpatched SD-WAN zero-day exploited in attacksCVE-2026-20127, CVE-2026-20182
  9. SecurityWeekCisco Warns of 7th SD-WAN Zero-Day Exploited in 2026CVE-2026-20127, CVE-2026-20182
  10. Cisco TalosOngoing exploitation of Cisco Catalyst SD-WAN vulnerabilitiesCVE-2026-20127, CVE-2026-20182

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store