{
  "_comment": "First fixed releases for the Catalyst SD-WAN control-component vulnerabilities that are in CISA's Known Exploited Vulnerabilities catalog, transcribed from Cisco's security advisories on October 24, 2026. Re-read every advisory before you rely on this file: Cisco revises fixed-release tables, and new advisories appear. Illustrative data, not an authority.",
  "as_of": "2026-10-24",
  "kev_catalog_version": "2026.10.23",
  "end_of_maintenance_trains": ["20.10", "20.11", "20.13", "20.14", "20.16"],
  "advisories": [
    {
      "id": "cisco-sa-sdwan-rpa-EHchtZk",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa-EHchtZk",
      "title": "Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability",
      "advisory_version": "2.0 (2026-06-16)",
      "cves": ["CVE-2026-20127"],
      "kev_cves": ["CVE-2026-20127"],
      "emergency_directive": "ED 26-03",
      "products": ["manager", "controller", "validator"],
      "minimum_train": "20.9",
      "trains": {
        "20.9": {"fixed": ["20.9.8.2"]},
        "20.11": {"migrate_to": "20.12.6.1"},
        "20.12": {"fixed": ["20.12.5.3", "20.12.6.1"]},
        "20.13": {"migrate_to": "20.15.4.2"},
        "20.14": {"migrate_to": "20.15.4.2"},
        "20.15": {"fixed": ["20.15.4.2"]},
        "20.16": {"migrate_to": "20.18.2.1"},
        "20.18": {"fixed": ["20.18.2.1"]}
      }
    },
    {
      "id": "cisco-sa-sdwan-authbp-qwCX8D4v",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v",
      "title": "Cisco Catalyst SD-WAN Manager Vulnerabilities",
      "advisory_version": "1.3 (2026-04-22)",
      "cves": ["CVE-2026-20122", "CVE-2026-20126", "CVE-2026-20128", "CVE-2026-20129", "CVE-2026-20133"],
      "kev_cves": ["CVE-2026-20122", "CVE-2026-20128", "CVE-2026-20133"],
      "emergency_directive": "ED 26-03",
      "products": ["manager"],
      "minimum_train": "20.9",
      "trains": {
        "20.9": {"fixed": ["20.9.8.2"]},
        "20.10": {"migrate_to": "20.12.6.1"},
        "20.11": {"migrate_to": "20.12.6.1"},
        "20.12": {"fixed": ["20.12.5.3", "20.12.6.1"]},
        "20.13": {"migrate_to": "20.15.4.2"},
        "20.14": {"migrate_to": "20.15.4.2"},
        "20.15": {"fixed": ["20.15.4.2"]},
        "20.16": {"migrate_to": "20.18.2.1"},
        "20.18": {"fixed": ["20.18.2.1"]}
      }
    },
    {
      "id": "cisco-sa-sdwan-rpa2-v69WY2SW",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SW",
      "title": "Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability",
      "advisory_version": "2.0 (2026-06-16)",
      "cves": ["CVE-2026-20182"],
      "kev_cves": ["CVE-2026-20182"],
      "emergency_directive": "ED 26-03",
      "products": ["manager", "controller", "validator"],
      "minimum_train": "20.9",
      "trains": {
        "20.9": {"fixed": ["20.9.9.1"]},
        "20.10": {"migrate_to": "20.12.7.1"},
        "20.11": {"migrate_to": "20.12.7.1"},
        "20.12": {"fixed": ["20.12.5.4", "20.12.6.2", "20.12.7.1"]},
        "20.13": {"migrate_to": "20.15.5.2"},
        "20.14": {"migrate_to": "20.15.5.2"},
        "20.15": {"fixed": ["20.15.4.4", "20.15.5.2"]},
        "20.16": {"migrate_to": "20.18.2.2"},
        "20.18": {"fixed": ["20.18.2.2"]},
        "26.1": {"fixed": ["26.1.1.1"]}
      }
    },
    {
      "id": "cisco-sa-sdwan-privesc-4uxFrdzx",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-privesc-4uxFrdzx",
      "title": "Cisco Catalyst SD-WAN Controller, Catalyst SD-WAN Manager, and Catalyst SD-WAN Validator Authenticated Privilege Escalation Vulnerability",
      "advisory_version": "1.10 (2026-07-21)",
      "cves": ["CVE-2026-20245"],
      "kev_cves": ["CVE-2026-20245"],
      "emergency_directive": null,
      "products": ["manager", "controller", "validator"],
      "minimum_train": "20.9",
      "trains": {
        "20.9": {"fixed": ["20.9.9.2"]},
        "20.12": {"fixed": ["20.12.7.2"]},
        "20.15": {"fixed": ["20.15.4.5", "20.15.5.3"]},
        "20.18": {"fixed": ["20.18.3.1"]},
        "26.1": {"fixed": ["26.1.1.2"]}
      }
    },
    {
      "id": "cisco-sa-sdwan-arbfw-c2rZvQ",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-arbfw-c2rZvQ",
      "title": "Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability",
      "advisory_version": "1.1 (2026-06-15)",
      "cves": ["CVE-2026-20262"],
      "kev_cves": ["CVE-2026-20262"],
      "emergency_directive": null,
      "products": ["manager"],
      "minimum_train": "20.9",
      "trains": {
        "20.9": {"fixed": ["20.9.9.2"]},
        "20.12": {"fixed": ["20.12.7.2"]},
        "20.15": {"fixed": ["20.15.4.5", "20.15.5.3"]},
        "20.18": {"fixed": ["20.18.3.1"]},
        "26.1": {"fixed": ["26.1.1.2"]}
      }
    },
    {
      "id": "cisco-sa-sdwan-webauth-xr8beuuU",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-webauth-xr8beuuU",
      "title": "Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability",
      "advisory_version": "1.1 (2026-10-02)",
      "cves": ["CVE-2026-76504"],
      "kev_cves": ["CVE-2026-76504"],
      "emergency_directive": null,
      "products": ["manager"],
      "minimum_train": "20.9",
      "trains": {
        "20.9": {"fixed": ["20.9.10.1"]},
        "20.12": {"fixed": ["20.12.8.2"]},
        "20.15": {"fixed": ["20.15.6.1"]},
        "20.18": {"fixed": ["20.18.4.1"]},
        "26.1": {"fixed": ["26.1.2.1"]},
        "26.2": {"fixed": ["26.2.1"]}
      }
    },
    {
      "id": "cisco-sa-sd-wan-priv-E6e8tEdF",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF",
      "title": "Cisco SD-WAN Software Privilege Escalation Vulnerabilities",
      "advisory_version": "1.2 (2026-02-25)",
      "cves": ["CVE-2022-20775", "CVE-2022-20818"],
      "kev_cves": ["CVE-2022-20775"],
      "emergency_directive": "ED 26-03",
      "products": ["manager", "controller", "validator"],
      "minimum_train": "20.6",
      "not_affected_from_train": "20.9",
      "trains": {
        "20.6": {"fixed": ["20.6.3"]},
        "20.7": {"fixed": ["20.7.2"]},
        "20.8": {"fixed": ["20.8.1"]}
      }
    }
  ]
}
