cisco-sa-vmanage-xss-ZqkhP9W9: Cisco Catalyst SD-WAN Manager Cross-Site Scripting Vulnerability

Published Mar 25, 2026

Updated

A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device.This vulnerability is due to insufficient

Affected Software

1 affected component

Cisco Catalyst SD-WAN Manager

Event History

Mar 25, 2026

Advisory Published

via Cisco·04:00 PM

Data Sourced

via Cisco·04:00 PM

DescriptionSeverityWeakness

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-20108

Frequently Asked Questions

What is the severity of cisco-sa-vmanage-xss-ZqkhP9W9?

The cisco-sa-vmanage-xss-ZqkhP9W9 vulnerability is classified as medium severity.

How do I fix cisco-sa-vmanage-xss-ZqkhP9W9?

To fix cisco-sa-vmanage-xss-ZqkhP9W9, update the Cisco Catalyst SD-WAN Manager to the latest patched version.

Who is affected by cisco-sa-vmanage-xss-ZqkhP9W9?

Organizations using Cisco Catalyst SD-WAN Manager are affected by the cisco-sa-vmanage-xss-ZqkhP9W9 vulnerability.

What type of attack can be executed through cisco-sa-vmanage-xss-ZqkhP9W9?

cisco-sa-vmanage-xss-ZqkhP9W9 allows authenticated remote attackers to perform cross-site scripting (XSS) attacks.

Is authentication required to exploit cisco-sa-vmanage-xss-ZqkhP9W9?

Yes, authentication is required to exploit the cisco-sa-vmanage-xss-ZqkhP9W9 vulnerability.