← Back to CVE List
CVE-2026-20128NVD
Vulnerability Summary
A vulnerability in the Data Collection Agent (DCA) feature of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain DCA user privileges on an affected system.
This vulnerability is due to the presence of a credential file for the DCA user on an affected system. An attacker could exploit this vulnerability by sending a crafted HTTP request and reading the file that contains the DCA password from that affected system. A successful exploit could allow the attacker to access another affected system and gain DCA user privileges.
Note: Cisco Catalyst SD-WAN Manager releases 20.18 and later are not affected by this vulnerability.
This vulnerability is due to the presence of a credential file for the DCA user on an affected system. An attacker could exploit this vulnerability by sending a crafted HTTP request and reading the file that contains the DCA password from that affected system. A successful exploit could allow the attacker to access another affected system and gain DCA user privileges.
Note: Cisco Catalyst SD-WAN Manager releases 20.18 and later are not affected by this vulnerability.
CVSS v3.1 Base Metrics — Score 7.5 (HIGH)
Attack VectorLocal
Attack ComplexityHigh
Privileges RequiredHigh
User InteractionNone
ScopeChanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
Affected & Patched Versions
- Cisco Catalyst Sd-wan Manager < 20.9.8.2
- Cisco Catalyst Sd-wan Manager >= 20.10 and < 20.12.5.3
- Cisco Catalyst Sd-wan Manager >= 20.13 and < 20.15.4.2
- Cisco Catalyst Sd-wan Manager >= 20.16 and < 20.18
- Cisco Catalyst Sd-wan Manager
- Cisco Catalyst Sd-wan Manager 20.9.8.2
- Cisco Catalyst Sd-wan Manager 20.12.5.3
- Cisco Catalyst Sd-wan Manager 20.15.4.2
- Cisco Catalyst Sd-wan Manager 20.18