CVE-2026-20127 — Cisco SD-WAN Controller Authentication Bypass Vulnerability (CVE-2026-20127)

88/100

Cisco SD-WAN Controller vulnerability allows bypassing authentication for administrative access.

• Actively exploited (CISA KEV, added 2026-02-25)
• EPSS 89.3 %
• Cisco
• CWE-287

Digest of 2026-10-29

Sources

• Cisco PSIRT advisories — Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
• Cisco Talos — Inside KeyDrift: Analyzing historical UAT-11473 activity on Cisco SD-WAN