Cisco Catalyst SD-WAN Manager CVE-2026-20245 Flaw Actively Exploited, No Patch Available

Cisco has warned that a high-severity security flaw impacting Catalyst SD-WAN Manager has come under active exploitation. The vulnerability, tracked as CVE-2026-20245, carries a CVSS score of 7.8 out of 10.0. An attacker with netadmin privileges can exploit the flaw by uploading a crafted file, allowing command injection attacks and privilege elevation as the root user.