{"schema":"vulnpedia.poc/1","cve":"CVE-2026-20127","kev":{"since":"2026-02-25","ransomware":false},"epss":{"score":0.89294,"percentile":0.9978},"cvss":{"version":"3.1","score":10,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"},"test_commands":[{"tool":"poc.json","cmd":"curl -s https://vulnpedia.com/cve/CVE-2026-20127/poc.json","note":"Machine-readable PoC index for this CVE (for automation)."}],"generated":"2026-10-26T06:59:15.268Z","has_public_poc":true,"poc_sources":[{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/53b5f3567623","executable":false,"sourceId":"53b5f3567623","verification":"catalogued","source":"vulncheck-kev","modified":"2026-02-25T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"53b5f3567623","modified":"2026-02-25T00:00:00Z","url":"https://vulncheck.com/xdb/53b5f3567623"}],"repositoryUrl":"https://github.com/sfewer-r7/CVE-2026-20127"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/da2efec40490","executable":false,"sourceId":"da2efec40490","verification":"catalogued","source":"vulncheck-kev","modified":"2026-02-25T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"da2efec40490","modified":"2026-02-25T00:00:00Z","url":"https://vulncheck.com/xdb/da2efec40490"}],"repositoryUrl":"https://github.com/flyawaytang/CVE-2026-20127"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/f430ad0dac3a","executable":false,"sourceId":"f430ad0dac3a","verification":"catalogued","source":"vulncheck-kev","modified":"2026-02-25T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"f430ad0dac3a","modified":"2026-02-25T00:00:00Z","url":"https://vulncheck.com/xdb/f430ad0dac3a"}],"repositoryUrl":"https://github.com/anuththara2007-W/CVE-2026-20127-Exploit-Extension"}],"poc_candidates":[{"url":"https://github.com/zerozenxlabs/CVE-2026-20127---Cisco-SD-WAN-Preauth-RCE","source":"poc-in-github","sourceId":"CVE-2026-20127","modified":"2026-10-19T16:35:36Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-20127","url":"https://github.com/zerozenxlabs/CVE-2026-20127---Cisco-SD-WAN-Preauth-RCE"},{"source":"poc-in-github","sourceId":"CVE-2026-20127","modified":"2026-10-19T16:35:36Z","url":"https://github.com/zerozenxlabs/CVE-2026-20127---Cisco-SD-WAN-Preauth-RCE"}],"tags":[]},{"url":"https://github.com/randeepajayasekara/CVE-2026-20127","source":"poc-in-github","sourceId":"CVE-2026-20127","description":"Walkthrough of the CVSS 10.0 authentication bypass in Cisco Catalyst SD-WAN from first malformed peering request to root on the management plane.","modified":"2026-03-12T06:34:04Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-20127","url":"https://github.com/randeepajayasekara/CVE-2026-20127"},{"source":"poc-in-github","sourceId":"CVE-2026-20127","modified":"2026-03-12T06:34:04Z","url":"https://github.com/randeepajayasekara/CVE-2026-20127"}],"tags":[]},{"url":"https://github.com/BugFor-Pings/CVE-2026-20127_EXP","source":"poc-in-github","sourceId":"CVE-2026-20127","description":"Cisco Catalyst SD-WAN 身份验证绕过漏洞(CVE-2026-20127)利用EXP","modified":"2026-03-31T13:50:52Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-20127","url":"https://github.com/BugFor-Pings/CVE-2026-20127_EXP"},{"source":"poc-in-github","sourceId":"CVE-2026-20127","modified":"2026-03-31T13:50:52Z","url":"https://github.com/BugFor-Pings/CVE-2026-20127_EXP"}],"tags":[]},{"url":"https://github.com/yonathanpy/CVE-2026-20127-Cisco-SD-WAN-Preauth-RCE","source":"poc-in-github","sourceId":"CVE-2026-20127","modified":"2026-03-19T16:14:54Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-20127","url":"https://github.com/yonathanpy/CVE-2026-20127-Cisco-SD-WAN-Preauth-RCE"},{"source":"poc-in-github","sourceId":"CVE-2026-20127","modified":"2026-03-19T16:14:54Z","url":"https://github.com/yonathanpy/CVE-2026-20127-Cisco-SD-WAN-Preauth-RCE"}],"tags":[]},{"url":"https://github.com/abrahamsurf/sdwan-scanner-CVE-2026-20127","source":"poc-in-github","sourceId":"CVE-2026-20127","description":"Cisco SD-WAN Exposure & Potential Vulnerability Scanner (Passive Fingerprinting) 2026","modified":"2026-03-08T09:24:09Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-20127","url":"https://github.com/abrahamsurf/sdwan-scanner-CVE-2026-20127"},{"source":"poc-in-github","sourceId":"CVE-2026-20127","modified":"2026-03-08T09:24:09Z","url":"https://github.com/abrahamsurf/sdwan-scanner-CVE-2026-20127"}],"tags":[]},{"url":"https://github.com/sfewer-r7/CVE-2026-20127","source":"poc-in-github","sourceId":"CVE-2026-20127","description":"An exploit for the Cisco Catalyst SD-WAN Controller authentication bypass vulnerability, CVE-2026-20127","modified":"2026-06-16T17:07:22Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-20127","url":"https://github.com/sfewer-r7/CVE-2026-20127"},{"source":"poc-in-github","sourceId":"CVE-2026-20127","modified":"2026-06-16T17:07:22Z","url":"https://github.com/sfewer-r7/CVE-2026-20127"}],"tags":[]},{"url":"https://github.com/gigachadusers/cve-2026-20127","source":"poc-in-github","sourceId":"CVE-2026-20127","modified":"2026-05-31T19:28:07Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-20127","url":"https://github.com/gigachadusers/cve-2026-20127"},{"source":"poc-in-github","sourceId":"CVE-2026-20127","modified":"2026-05-31T19:28:07Z","url":"https://github.com/gigachadusers/cve-2026-20127"}],"tags":[]},{"url":"https://github.com/0xBlackash/CVE-2026-20127","source":"poc-in-github","sourceId":"CVE-2026-20127","description":"CVE-2026-20127","modified":"2026-06-14T13:35:35Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-20127","url":"https://github.com/0xBlackash/CVE-2026-20127"},{"source":"poc-in-github","sourceId":"CVE-2026-20127","modified":"2026-06-14T13:35:35Z","url":"https://github.com/0xBlackash/CVE-2026-20127"}],"tags":[]},{"url":"https://github.com/anuththara2007-W/CVE-2026-20127-Exploit-Extension","source":"poc-in-github","sourceId":"CVE-2026-20127","modified":"2026-07-12T04:28:40Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-20127","url":"https://github.com/anuththara2007-W/CVE-2026-20127-Exploit-Extension"},{"source":"poc-in-github","sourceId":"CVE-2026-20127","modified":"2026-07-12T04:28:40Z","url":"https://github.com/anuththara2007-W/CVE-2026-20127-Exploit-Extension"}],"tags":[]}],"detection_sources":[],"discovery_links":[{"kind":"github-search","url":"https://github.com/search?q=%22CVE-2026-20127%22&type=repositories","executable":false}]}