CVE-2026-20245/CVE-2022-20775 Privilege Escalation to Root on Cisco SD-WAN

Ibrahim Saud@tektrix

•updated Jun 25, 2026•1•0•5

Detects suspicious activity on Cisco SD-WAN infrastructure (vManage, vSmart, vBond) associated with unauthorized configuration changes, potential exploitation of CVE-2026-20245, rogue account creation, and anti-forensic behaviors.