Sd-wan Vbond Orchestrator vulnerabilities

6 known vulnerabilities in Sd-wan Vbond Orchestrator from Cisco. 6 are rated high or critical, and 3 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 10.0 Critical severity

  Cisco Catalyst SD-WAN Controller Authentication Bypass Exploited

  CVE-2026-20182May 14, 2026CiscoEPSS 91.1%

  May 2026: This security advisory provides the details and fix information for a vulnerability that was discovered and fixed after the was disclosed in February 2026. This new advisory is for a new vulnerability in the control connection handshaking. The sectio

• 10.0 Critical severity

  Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Exploited

  CVE-2026-20127Feb 25, 2026CiscoEPSS 87.6%

  A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an unauthenticated, remot

• 7.1 High severity

  A vulnerability in the CLI of stand-alone Cisco IOS XE SD-WAN Software and Cisco SD-WAN…

  CVE-2022-20850Sep 30, 2022Cisco

  A vulnerability in the CLI of stand-alone Cisco IOS XE SD-WAN Software and Cisco SD-WAN Software could allow an authenticated, local attacker to delete arbitrary files from the file system of an affected device. This vulnerability is due to insufficient input

• 7.8 High severity

  Cisco SD-WAN Solution: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2022-20818Sep 30, 2022Cisco

  Multiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. These vulnerabilities are due to improper access controls on commands within the application CLI. An attacker could exploit t

• 7.8 High severity

  Cisco SD-WAN Path Traversal Exploited

  CVE-2022-20775Sep 30, 2022CiscoEPSS 12%

  A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. This vulnerability is due to improper access controls on commands within the application CLI. An attacker could exploit this vulnerabi

• 7.8 High severity

  Cisco SD-WAN Solution: Improper Access Control

  CVE-2022-20716Apr 15, 2022Cisco

  A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain escalated privileges. This vulnerability is due to improper access control on files within the affected system. A local attacker could exploit this vulnera