Summary
Cisco Catalyst SD-WAN Manager contains an incorrect use of privileged APIs vulnerability due to improper file handling on the API interface of an affected system. An attacker could exploit this vulnerability by uploading a malicious file on the local file system. A successful exploit could allow the attacker to overwrite arbitrary files on the affected system and gain vmanage user privileges.
- Vendor
- Cisco
- Product
- Catalyst SD-WAN Manger
- Added to KEV
- Apr 20, 2026
- Remediation due
- Apr 23, 2026 (US federal deadline)
- Ransomware use
- Not known
- Weakness
- CWE-648
- EPSS
- 25.8% as of Nov 12
In the news
- No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
- none recorded
References