Активное использование эскалации привилегий в Cisco Catalyst SD-WAN

Attackers are currently exploiting CVE-2026-20245 to achieve privilege escalation within Cisco Catalyst SD-WAN Manager deployments.

Active Exploitation of CVE-2026-20245

Cisco has confirmed that this specific vulnerability is being actively leveraged in the wild. The flaw targets the Catalyst SD-WAN Manager across all currently available versions, providing a direct path for an attacker to elevate their access levels within the system. Because this is an active exploitation scenario, the window for patching is critical for network administrators.

Remediation and Patching Requirements

Securing affected environments requires immediate attention to Cisco's official security advisories. Administrators should refer to the Cisco security bulletin (cisco-sa-sdwan-privesc-4uxFrdzx) to obtain the necessary software updates and patches. Given the nature of SD-WAN infrastructure, ensuring the integrity of the Manager component is paramount to maintaining overall network security.

Deploying these updates immediately mitigates the risk of unauthorized administrative control over the SD-WAN fabric.

Source: Vulnérabilité dans Cisco Catalyst SD-WAN (05 juin 2026)
Domain: cert.ssi.gouv.fr