Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability
AV AC PR UI S C I A CVSS EPSS %ile KEV
N L L N U N H N 6.5 .2817 98.0 YES
AFFECTED
Product Versions Fixed
Cisco Catalyst SD-WAN Manager 20.1.12 – —
TIMELINE
Oct 8 Reserved by cisco
Jun 15 Added to CISA KEV, remediation due 2026-06-29
Jun 15 Published (CNA: cisco)
Jun 30 DUE DATE PASSED — CVE-2026-20262 (Cisco Catalyst SD-WAN Manager). CISA remediation deadline was June 29, 2026; still in catalog.
Jul 24 ENRICHED — CVE-2026-20262 (Cisco Catalyst SD-WAN Manager). Received CVSS 6.5 and CPE data from NVD.
Description
A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker to create a file or overwrite any file on the filesystem of an affected system.
This vulnerability exists because the affected software does not properly validate user-supplied input during a file upload process. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected API endpoint of the affected system. A successful exploit could allow the attacker to create or overwrite any file on the underlying operating system. This file could later be used to elevate to root. To exploit this vulnerability, the attacker must have valid credentials with at least a lower-privileged, single-task user account.
Lifecycle
Complete event history — 5 events, chronological
| Date | Event | Detail |
|---|
| October 8, 2025 | Reserved | Reserved by cisco |
| June 15, 2026 | KEV ADDED | Added to CISA KEV, remediation due 2026-06-29 |
| June 15, 2026 | Published | Published (CNA: cisco) |
| June 30, 2026 | DUE DATE PASSED | DUE DATE PASSED — CVE-2026-20262 (Cisco Catalyst SD-WAN Manager). CISA remediation deadline was June 29, 2026; still in catalog. |
| July 24, 2026 | ENRICHED | ENRICHED — CVE-2026-20262 (Cisco Catalyst SD-WAN Manager). Received CVSS 6.5 and CPE data from NVD. |
Affected
Affected products and packages — 1 row
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
|---|
| Cisco | Cisco Catalyst SD-WAN Manager | — | 20.1.12 | — |
About this page
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2026-20262 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.