CVE-2026-20128

Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability

Added to CISA KEV: 2026-04-20

By FixTheVuln Team Sources: CISA KEV Catalog, NVD
CVSS 7.5 — HIGH ACTIVE

Description

Cisco Catalyst SD-WAN Manager contains a storing passwords in a recoverable format vulnerability that allows an...

Required Action

Fix: Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.

References

Assess Your Risk

Use the CVSS Calculator to evaluate how this vulnerability affects your specific environment. Consider your network exposure, existing mitigations, and asset criticality.

Frequently Asked Questions

What is CVE-2026-20128?

CVE-2026-20128 (Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability) is a vulnerability with a CVSS score of 7.5 (HIGH). Cisco Catalyst SD-WAN Manager contains a storing passwords in a recoverable format vulnerability that allows an...

How do I fix CVE-2026-20128?

Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.

How severe is CVE-2026-20128?

CVE-2026-20128 has a CVSS score of 7.5, classified as HIGH. This vulnerability is in the CISA Known Exploited Vulnerabilities (KEV) catalog, meaning it has been actively exploited in the wild.

Free Security Tools

CVSS Calculator Security+ Practice Quiz Password Strength Checker

FixTheVuln Store

Stay Ahead of Vulnerabilities

Structured study planners for 60+ security certifications. Master vulnerability management with domain trackers and exam strategies.

Shop Security+ Planner

CyberFolio

Vulnerability management on your resume? Prove it.

Build a shareable cybersecurity portfolio that highlights your certifications, projects, and skills — free.

Build Your Portfolio →
← Back to Home ← All CVEs