{"schema":"vulnpedia.research/1","cve":"CVE-2026-20245","references":[{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-privesc-4uxFrdzx","tags":["Vendor Advisory","KEV report"],"source":"mitre","sourceId":"cisco","modified":"2026-07-21T16:17:48.759Z","origins":[{"source":"mitre","sourceId":"cisco","modified":"2026-07-21T16:17:48.759Z","url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-privesc-4uxFrdzx"},{"source":"nvd","sourceId":"CVE-2026-20245","modified":"2026-07-23T07:10:00.113","url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-privesc-4uxFrdzx"},{"source":"vulncheck-kev","sourceId":"CVE-2026-20245","modified":"2026-06-05T00:00:00Z","url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-privesc-4uxFrdzx"}]},{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SW","tags":["Vendor Advisory"],"source":"mitre","sourceId":"cisco","modified":"2026-07-21T16:17:48.759Z","origins":[{"source":"mitre","sourceId":"cisco","modified":"2026-07-21T16:17:48.759Z","url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SW"},{"source":"nvd","sourceId":"CVE-2026-20245","modified":"2026-07-23T07:10:00.113","url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SW"}]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20245","tags":["government-resource","US Government Resource"],"source":"mitre","sourceId":"CISA-ADP","modified":"2026-06-10T03:55:26.927Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-06-10T03:55:26.927Z","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20245"},{"source":"nvd","sourceId":"CVE-2026-20245","modified":"2026-07-23T07:10:00.113","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20245"}]},{"source":"euvd","sourceId":"EUVD-2026-34341","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-34341","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-34341","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-34341"}]},{"url":"https://vulncheck.com/kev","tags":["ADVISORY"],"source":"vulncheck-kev","sourceId":"CVE-2026-20245","modified":"2026-06-05T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20245","modified":"2026-06-05T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-20245","modified":"2026-06-05T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20245","modified":"2026-06-05T00:00:00Z","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"url":"https://www.linkedin.com/posts/charlescarmakal_urgent-multiple-0-day-vulnerabilities-share-7470696836803117057-mf6m/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-20245","modified":"2026-06-05T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20245","modified":"2026-06-05T00:00:00Z","url":"https://www.linkedin.com/posts/charlescarmakal_urgent-multiple-0-day-vulnerabilities-share-7470696836803117057-mf6m/"}]},{"url":"https://cloud.google.com/blog/topics/threat-intelligence/zero-day-exploitation-cisco-catalyst-sd-wan-manager/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-20245","modified":"2026-06-05T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20245","modified":"2026-06-05T00:00:00Z","url":"https://cloud.google.com/blog/topics/threat-intelligence/zero-day-exploitation-cisco-catalyst-sd-wan-manager/"}]},{"url":"https://www.recordedfuture.com/blog/june-2026-cve-landscape","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-20245","modified":"2026-06-05T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20245","modified":"2026-06-05T00:00:00Z","url":"https://www.recordedfuture.com/blog/june-2026-cve-landscape"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/HORKimhab/CVE-2026-20245","source":"poc-in-github","sourceId":"CVE-2026-20245","description":"CVE-2026-20245 - Cisco SD-WAN - Draft","modified":"2026-06-06T04:26:22Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-20245","url":"https://github.com/HORKimhab/CVE-2026-20245"},{"source":"poc-in-github","sourceId":"CVE-2026-20245","modified":"2026-06-06T04:26:22Z","url":"https://github.com/HORKimhab/CVE-2026-20245"}],"tags":[]},{"url":"https://github.com/fevar54/CVE-2026-20245---Cisco-SD-WAN-Privilege-Escalation-Exploit","source":"poc-in-github","sourceId":"CVE-2026-20245","description":"PoC de CVE-2026-20245: escalada de privilegios en Cisco SD-WAN. Solo fines educativos y pruebas autorizadas.","modified":"2026-08-25T16:45:13Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-20245","url":"https://github.com/fevar54/CVE-2026-20245---Cisco-SD-WAN-Privilege-Escalation-Exploit"},{"source":"poc-in-github","sourceId":"CVE-2026-20245","modified":"2026-08-25T16:45:13Z","url":"https://github.com/fevar54/CVE-2026-20245---Cisco-SD-WAN-Privilege-Escalation-Exploit"}],"tags":[]},{"url":"https://github.com/0xBlackash/CVE-2026-20245","source":"poc-in-github","sourceId":"CVE-2026-20245","description":"CVE-2026-20245","modified":"2026-06-16T03:00:02Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-20245","url":"https://github.com/0xBlackash/CVE-2026-20245"},{"source":"poc-in-github","sourceId":"CVE-2026-20245","modified":"2026-06-16T03:00:02Z","url":"https://github.com/0xBlackash/CVE-2026-20245"}],"tags":[]}],"cataloguedPoc":[],"vendorStatements":[],"exploitationSources":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20245","catalog":"VulnCheck KEV","kind":"catalogue","url":"https://vulncheck.com/kev","dateAdded":"2026-06-05T00:00:00Z","modified":"2026-06-05T00:00:00Z","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"Unknown","reportedByVulncheckCanaries":false,"vendorProject":"Cisco","product":"Catalyst SD-WAN Manager","dueDate":"2026-06-23T00:00:00Z","cisaDateAdded":"2026-06-09T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20245","modified":"2026-06-05T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-20245","catalog":"VulnCheck KEV","kind":"report","url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-privesc-4uxFrdzx","dateAdded":"2026-06-05T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20245","url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-privesc-4uxFrdzx"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-20245","catalog":"VulnCheck KEV","kind":"report","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","dateAdded":"2026-06-09T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20245","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-20245","catalog":"VulnCheck KEV","kind":"report","url":"https://www.linkedin.com/posts/charlescarmakal_urgent-multiple-0-day-vulnerabilities-share-7470696836803117057-mf6m/","dateAdded":"2026-06-11T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20245","url":"https://www.linkedin.com/posts/charlescarmakal_urgent-multiple-0-day-vulnerabilities-share-7470696836803117057-mf6m/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-20245","catalog":"VulnCheck KEV","kind":"report","url":"https://cloud.google.com/blog/topics/threat-intelligence/zero-day-exploitation-cisco-catalyst-sd-wan-manager/","dateAdded":"2026-06-24T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20245","url":"https://cloud.google.com/blog/topics/threat-intelligence/zero-day-exploitation-cisco-catalyst-sd-wan-manager/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-20245","catalog":"VulnCheck KEV","kind":"report","url":"https://www.recordedfuture.com/blog/june-2026-cve-landscape","dateAdded":"2026-07-10T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20245","url":"https://www.recordedfuture.com/blog/june-2026-cve-landscape"}]}]}