CVE-2026-20294

Name of the Vulnerable Software and Affected Versions Cisco Catalyst SD-WAN Manager (affected versions not specified)

Description An issue in the web-based management interface allows an authenticated, remote attacker to view sensitive information in clear text. This occurs due to insufficient access control enforcement for specific template types that are not included in the encryption allowlist. A low-privileged attacker can exploit this by viewing logs on the local system or a remote logging server, potentially exposing sensitive authentication credentials and leading to further compromise of network infrastructure and connected services.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.