CVE-2026-20128CISA KEV: Actively Exploited

Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability

Published Apr 20, 2026·Updated Apr 20, 2026

Description

Cisco Catalyst SD-WAN Manager contains a storing passwords in a recoverable format vulnerability that allows an authenticated, local attacker to gain DCA user privileges by accessing a credential file for the DCA user on the filesystem as a low-privileged user.

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Register your stack and get notified within minutes when a matching CVE drops.

Start monitoring free