CVE-2026-20245
Actively exploited (CISA KEV) - patch before 2026-06-23
Cisco Catalyst SD-WAN Manager formerly SD-WAN vManage contains an improper encoding or escaping of output vulnerability. This vulnerability could allow an authenticated, local attacker to execute arbitrary commands as root by supplying a crafted file to the affected system.
Actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog. No distribution fix is listed yet; apply vendor mitigations and monitor.
Recommended action: No fix is published yet for an actively-exploited flaw. Apply vendor mitigations, restrict exposure, and watch for a patch.
Affected & fixed versions by distribution
Versions are the native distribution strings (backport-aware): RHEL/Debian/SUSE backport fixes, so compare with the distro version comparator (dpkg / rpm / vercmp), not the upstream version.
No affected package in the tracked watchlist yet (Debian, Ubuntu, Arch, SUSE, Red Hat...). Triage may still be pending.