CyberSec.Space Logo
Back to CVE Browser

CVE-2026-20128

🔥 Known Exploited (CISA KEV)HIGH
8.3
CVSS Severity Score
EPSS Score93.4970%
EPSS Percentile89.47th
Published2026-04-20
Last Modified2026-06-12
Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

Cisco Catalyst SD-WAN Manager contains a storing passwords in a recoverable format vulnerability that allows an authenticated, local attacker to gain DCA user privileges by accessing a credential file for the DCA user on the filesystem as a low-privileged user.

Affected Platforms (CPE)

No CPE configurations currently published for this record.

References & Advisories

🔗 https://nvd.nist.gov/vuln/detail/CVE-2026-20128

Related Security Intelligence Articles

Daily Global Cyber Threat Intelligence Digest — July 24, 2026

This digest covers active exploitation of Check Point CVE-2026-16232 SmartConsole authentication bypass, Russian LAUNDRY BEAR targeting Zimbra vulnerabilities, malicious Claude Desktop ad campaigns deploying SectopRAT, and Chaos ransomware msaRAT operations.

2026-07-24

Related Vulnerabilities

CVE-2026-674394.3

OliveTin gives safe and simple access to predefined shell commands from a web interface. Prior to 3000.17.0, the service/internal/...

CVE-2026-674386.6

OliveTin gives access to predefined shell commands from a web interface. From 3000.2.0 until 3000.17.0, the service/internal/execu...

CVE-2026-674377.5

OliveTin gives access to predefined shell commands from a web interface. From 3000.0.0 until 3000.17.0, the service/internal/auth/...

CVE-2026-659756.5

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. In versions 1.88.0 up to but n...

CVE-2026-20128 Detail & Impact Analysis | CVSS 8.3 (HIGH) | Cyber-Sec.Space | Cyber-Sec.Space