THREATOPS

THREAT OPS › Threat News › [CISA KEV] CVE-2026-20182 — Cisco Catalyst SD-WAN: Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

[CISA KEV] CVE-2026-20182 — Cisco Catalyst SD-WAN: Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

lowcisa_kevPublished 2026-05-14

CVE: CVE-2026-20182 Vendor: Cisco Product: Catalyst SD-WAN Vulnerability: Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability Date Added: 2026-05-14 Required Action: Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlined in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s Hunt & Hardening Gui

MITRE ATT&CK techniques

VulnerabilitiesT1588.006
Cloud ServicesT1021.007

Indicators of compromise

CVE-2026-20182cve
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SWurl

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-20182