CISCO: Reference: Cisco Security Advisory

CISCO Security Advisory

Published Date: June 16, 2026

CVE: CVE-2026-20127

Advisory Summary

➤ Critical Authentication Bypass Vulnerability Discovered in Cisco Catalyst SD-WAN Controller

A severe security vulnerability has been identified in Cisco Catalyst SD-WAN Controller (previously SD-WAN vSmart), SD-WAN Manager (formerly vManage), and SD-WAN Validator (formerly vBond). This flaw in the peering authentication mechanism could allow unauthenticated remote attackers to bypass authentication processes and gain administrative-level access to affected systems.

The root cause stems from a malfunction in the peering authentication system, enabling attackers to send specially crafted requests to log in as privileged internal non-root users. With these elevated privileges, attackers can leverage NETCONF access to manipulate network configurations across the SD-WAN fabric, potentially causing extensive network disruption or unauthorized configuration changes.

Cisco has addressed this critical issue with software updates and strongly recommends immediate patching. Notably, there are currently no effective workarounds for this vulnerability, emphasizing the urgency for applying the released patches.

🔔 IT infrastructure teams running Cisco Catalyst SD-WAN environments should prioritize reviewing their deployments and applying the latest security updates to mitigate potential exploitation.

For further technical details and update downloads, please refer to Cisco’s official security advisory linked below.

-WAN -2026-20127

Reference: Vendor Advisory