What is CVE-2026-20294?

CVE-2026-20294 is a medium-severity vulnerability in Cisco Catalyst Sd-wan Manager, classified under Cleartext Transmission of Sensitive Information. CVSS score: 6.5/10. Published 2026-08-05.

How severe is CVE-2026-20294?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in Cisco Catalyst Sd-wan Manager

CVE-2026-20294

A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. This vulnerability is due to insuffi…

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Cisco Catalyst Sd-wan Manager — versions 20.1.12, 19.2.1, 18.4.4

Weakness classification (CWE)

CWE-319 — Cleartext Transmission of Sensitive Information

References

psirt@cisco.com

Frequently asked questions

What is CVE-2026-20294?: CVE-2026-20294 is a medium-severity vulnerability in Cisco Catalyst Sd-wan Manager, classified under Cleartext Transmission of Sensitive Information. CVSS score: 6.5/10. Published 2026-08-05.
How severe is CVE-2026-20294?: Medium severity. CVSS v3 base score is 6.5 out of 10.