Cisco SD-WAN Manager Vulnerability Allows Privilege Escalation to Root (advisories.ncsc.nl)

• Cisco SD-WAN Manager (vManage) has a critical vulnerability.
• Attackers with admin privileges can gain root access.
• Active exploitation observed; prior patches provide protection.

"Cisco has fixed a vulnerability in SD-WAN Manager (formerly vManage). An attacker with network admin privileges can upload a specially crafted file to escalate privileges to root. Active exploitation has been observed. The vulnerability requires prior exploitation of CVE-2026-20182 or CVE-2026-20127 unless already patched."