Description
Cisco Catalyst SD-WAN 是思科推出的企业级软件定义广域网解决方案，旨在通过集中式管理和自动化功能简化分支机构网络部署。该漏洞源于对等身份验证逻辑的实现错误，未经身份验证的攻击者可利用该漏洞向受影响系统发送精心构造的请求，绕过身份验证机制并上传恶意war包获取服务器权限。
Cisco Catalyst SD-WAN 权限绕过漏洞（CVE-2026-20127）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa-EHchtZk
https://nvd.nist.gov/vuln/detail/CVE-2026-20127
https://www.ithome.com.tw/news/174074
https://arcticwolf.com/resources/blog/cve-2026-20127/
https://www.rapid7.com/blog/post/etr-critical-cisco-catalyst-vulnerability-exploited-in-the-wild-cve-2026-20127/
https://www.nics.nat.gov.tw/core_business/information_security_information_sharing/Vulnerability_Alert_Announcements/99d119b9-d661-4fb8-91bd-03387cac1032/
https://www.sohu.com/a/990779295_122036485
https://blog.talosintelligence.com/uat-8616-sd-wan/
https://github.com/sfewer-r7/CVE-2026-20127
https://www.cve.org/CVERecord?id=CVE-2026-20127