Known vulnerabilities in Cisco SD-WAN vEdge Routers

Vendor: Cisco Systems, Inc
Software: Cisco SD-WAN vEdge Routers
Software CPE: cpe:2.3:h:cisco_systems:cisco_sd-wan_vedge_routers:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 38
Public exploits: 1
Known exploited (KEV): 2
Highest CVSSv4 Score: 10

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco SD-WAN vEdge Routers Cisco SD-WAN vEdge Routers is affected by 38 known vulnerabilities: 2 critical, 2 high, 10 medium, 24 low Critical High Medium Low

Vulnerabilities (38)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU131450 - Improper Authentication
CVE-2026-20182		 CWE-287 Critical
Available
Exploited
 20.15.4.3, 20.15.5.1, 20.18.2.2, 26.1.1 14.05.2026 SB20260514104
#VU116085 - Improper Access Control
CVE-2025-20339		 CWE-284 Medium
No
No
 20.9.7 24.09.2025 SB2025092468
#VU97721 - Out-of-bounds write
CVE-2024-20496		 CWE-787 Low
No
No
 20.6.6, 20.9.4 26.09.2024 SB2024092620
#VU67748 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-20850		 CWE-22 Low
No
No
 - 29.09.2022 SB2022092928
#VU67747 - Improper Access Control
CVE-2022-20818		 CWE-284 Low
No
No
 - 29.09.2022 SB2022092927
#VU67746 - Improper Access Control
CVE-2022-20775		 CWE-284 Low
No
Exploited
 - 29.09.2022 SB2022092926
#VU62345 - Improper Access Control
CVE-2022-20716		 CWE-284 Low
No
No
 20.6.1, 20.7.1 15.04.2022 SB2022041503
#VU59955 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-20655		 CWE-78 Low
No
No
 18.4.4, 19.2.1, 19.3.0, 20.1.1 24.01.2022 SB2022012410
SB2022012512
#VU56871 - Command injection
CVE-2021-34726		 CWE-77 Low
No
No
 - 24.09.2021 SB2021092423
#VU53756 - Execution with Unnecessary Privileges
CVE-2021-1528		 CWE-250 Low
No
No
 20.4.2, 20.5.1 03.06.2021 SB2021060305
#VU52934 - Improper input validation
CVE-2021-1514		 CWE-20 Low
No
No
 18.3.0, 18.4.0, 19.1.0, 19.2.0, 19.3.0, 20.1.1, 20.3.1, 20.4.1, 20.5.1 06.05.2021 SB2021050623
#VU52932 - Improper input validation
CVE-2021-1513		 CWE-20 Medium
No
No
 20.4.1, 20.5.1 06.05.2021 SB2021050622
#VU52931 - Files or Directories Accessible to External Parties
CVE-2021-1512		 CWE-552 Low
No
No
 18.4.6, 19.2.3, 20.1.2, 20.3.1, 20.4.1, 20.5.1 06.05.2021 SB2021050619
#VU52930 - Memory corruption
CVE-2021-1511		 CWE-119 Medium
No
No
 20.4.1, 20.5.1 06.05.2021 SB2021050618
#VU52929 - Memory corruption
CVE-2021-1510		 CWE-119 Medium
No
No
 20.4.1, 20.5.1 06.05.2021 SB2021050618
#VU52927 - Memory corruption
CVE-2021-1509		 CWE-119 Medium
No
No
 20.4.1, 20.5.1 06.05.2021 SB2021050618
#VU51706 - Memory corruption
CVE-2021-1433		 CWE-119 Critical
No
No
 - 24.03.2021 SB2021032415
#VU51705 - Files or Directories Accessible to External Parties
CVE-2021-1434		 CWE-552 Low
No
No
 - 24.03.2021 SB2021032414
#VU51232 - Improper Verification of Cryptographic Signature
CVE-2021-1461		 CWE-347 Low
No
No
 18.4.5, 19.2.2, 20.1.1, 20.3.1, 20.4.1 04.03.2021 SB2021030427
#VU50013 - NULL Pointer Dereference
CVE-2021-1274		 CWE-476 Medium
No
No
 - 20.01.2021 SB2021012618


Showing elements 1 - 20 out of 38