[US] cyber 7.0 — CVE-2026-20182 — Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

SITUATIONAL AWARENESS BRIEFING

Event Status CISA has released notice of CVE-2026-20182, an authentication bypass vulnerability in Cisco Catalyst SD-WAN Controllers. Severity rated 7/10. The vulnerability allows unauthenticated attackers to access controller interfaces without valid credentials. Scope appears broad — affects systems across enterprise WAN deployments. No evidence of active exploitation campaigns reported at this time, but vulnerability is public. Patches likely forthcoming from Cisco; timelines unknown.

Operational Relevance Organizations relying on Catalyst SD-WAN for network segmentation, remote site connectivity, or workforce access control should assess whether this infrastructure sits in their critical path. Consider: potential disruption to remote work connectivity, facility access systems dependent on network authentication, and personnel routing through affected controllers. Inventory your controller versions and determine patch availability windows.