🔥 This vulnerability is being actively exploited in the wild (CISA Known Exploited Vulnerabilities catalog)
CVE-2026-20133: Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Summary
Cisco Catalyst SD-WAN Manager has a vulnerability that lets remote attackers view sensitive information they shouldn't have access to. This flaw is currently being actively exploited by attackers in real-world situations. Organizations using this product need to take immediate action to assess their exposure and reduce risk.
Solution / Mitigation
According to CISA, follow guidelines in Emergency Directive 26-03 and the 'Hunt & Hardening Guidance for Cisco SD-WAN Devices' to assess exposure and mitigate risks. Additionally, follow applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available. The deadline for action is April 23, 2026.
Vulnerability Details
EPSS: 0.1%
Yes
🔥 Actively Exploited
April 19, 2026
Classification
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-20133
First tracked: April 20, 2026 at 08:00 PM
Classified by LLM (prompt v3) · confidence: 95%