u/barryhesk

A couple of CVEs dropped at 16:00 GMT.

CVE-2026-20224: Critical

CVE-2026-20182: Critical

There's also a couple of Medium ones as well.

Apparently CVE-2026-20182 is being seen in the wild - according to Cisco this is in a "limited" way. Whatever that means.

Best of luck all & Happy Patching.

Edit:

Added URLs

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SW?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Catalyst%20SD-WAN%20Controller%20Authentication%20Bypass%20Vulnerability%26vs_k=1

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-mltvnps2-JxpWm7R?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Catalyst%20SD-WAN%20Manager%20Vulnerabilities%26vs_k=1