Cisco patches for Catalyst SD‑WAN Manager vulnerability (CVE‑2026‑20262)

Colleagues, a cybersecurity advisory: Cisco has released patches for a vulnerability in Catalyst SD‑WAN Manager (CVE‑2026‑20262).

Key points:
- A flaw in the web UI allows an authenticated user with write privileges to upload/overwrite files, potentially escalating to root.
- Affects on‑premises, cloud and government SD‑WAN deployments.
- Cisco observed limited exploitation and published IOCs; CISA added the CVE to KEV with a remediation deadline of 29 June 2026.

Why it matters: apply patches immediately and check /var/log/nms/vmanage-server.log.

Have you checked your SD‑WAN and logs for suspicious .war uploads?

#cybersecurity #SDWAN #Cisco #patching