CVE-2026-20245 Cisco SD-WAN Manager Tenant Upload Privilege Escalation to Root

Ibrahim Saud@tektrix

•updated Jun 29, 2026•0•0•5

Detects exploitation of CVE-2026-20245 on Cisco Catalyst SD-WAN Manager, where a malicious CSV file is uploaded via the tenant-list workflow to trigger a script that injects a root-privileged account into system files.