CVE-2026-20262: MEDIUM (CVSS 6.5), Actively Exploited (CISA KEV)

MEDIUM (CVSS 6.5), Actively Exploited (CISA KEV), EPSS 7.7%. A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker to create a file or overwrite any file on the filesystem of an affected system.

This vulnerability exists because the affected software does not properly validate