# SD-WAN vulnerabilities > SD-WAN is made by Cisco. We track 27 published vulnerabilities listed under that exact name, across 84 versions. 1 of them is on the list of flaws known to be exploited, the newest added on 25 February 2026. Cisco lists newer releases under their own names, such as SD-WAN Vmanage, so check those pages too. Canonical page: https://www.precursorintelligence.com/product/cisco/sd-wan ## At a glance - **Made by:** [Cisco](https://www.precursorintelligence.com/vendors/cisco) - **Published vulnerabilities:** 27 - **Known to be exploited:** 1 (listed under the name SD-WAN) - **Versions tracked:** 84 - **Most recently added to the known-exploited list:** [CVE-2022-20775](https://www.precursorintelligence.com/what-is/cve-2022-20775), 25 February 2026. We keep watching the list. ## Is SD-WAN listed under other names? Cisco also lists SD-WAN under more specific names, such as SD-WAN Vmanage and SD-WAN Firmware. Flaws listed only under those names are counted on their own pages, not here. - [SD-WAN Vmanage](https://www.precursorintelligence.com/product/cisco/sd-wan_vmanage): 42 published vulnerabilities - [SD-WAN Firmware](https://www.precursorintelligence.com/product/cisco/sd-wan_firmware): 41 published vulnerabilities - [SD-WAN Vbond Orchestrator](https://www.precursorintelligence.com/product/cisco/sd-wan_vbond_orchestrator): 25 published vulnerabilities - [SD-WAN Vsmart Controller Firmware](https://www.precursorintelligence.com/product/cisco/sd-wan_vsmart_controller_firmware): 14 published vulnerabilities - [SD-WAN Vsmart Controller](https://www.precursorintelligence.com/product/cisco/sd-wan_vsmart_controller): 4 published vulnerabilities - [SD-WAN Vedge Router](https://www.precursorintelligence.com/product/cisco/sd-wan_vedge_router): 2 published vulnerabilities - [SD-WAN Vedge Cloud](https://www.precursorintelligence.com/product/cisco/sd-wan_vedge_cloud): 1 published vulnerability - [SD-WAN Solution](https://www.precursorintelligence.com/product/cisco/sd-wan_solution): 1 published vulnerability - [SD-WAN Manager](https://www.precursorintelligence.com/product/cisco/sd-wan_manager): 1 published vulnerability - [SD-WAN Vsmart Controller Software](https://www.precursorintelligence.com/product/cisco/sd-wan_vsmart_controller_software): 1 published vulnerability ## Which versions of SD-WAN do the exploited flaws hit? Each exploited flaw lists the versions it affects, as published. "20.6 to before 20.6.3" means from 20.6 up to, but not including, 20.6.3. - [CVE-2022-20775](https://www.precursorintelligence.com/what-is/cve-2022-20775) (Cisco SD-WAN Path Traversal Vulnerability): 20.6 to before 20.6.3, 20.7 to before 20.7.2, 20.8 ## Which SD-WAN vulnerabilities are being exploited? 1 flaw is on the government list of vulnerabilities known to be exploited, newest first: - [CVE-2022-20775](https://www.precursorintelligence.com/what-is/cve-2022-20775): Cisco SD-WAN Path Traversal Vulnerability. High, CVSS 7.8, chance of use in 30 days 12%, known exploited since 25 February 2026. ## Which SD-WAN flaws are most likely to be used? Ranked by the latest exploit-likelihood forecast (the chance each flaw is used in an attack in the next 30 days): - [CVE-2020-27128](https://www.precursorintelligence.com/what-is/cve-2020-27128): 61%, Medium (CVSS 6.5) - [CVE-2022-20775](https://www.precursorintelligence.com/what-is/cve-2022-20775): 12%, High (CVSS 7.8), known exploited - [CVE-2019-1624](https://www.precursorintelligence.com/what-is/cve-2019-1624): 4.3%, High (CVSS 8.8) - [CVE-2020-3375](https://www.precursorintelligence.com/what-is/cve-2020-3375): 3.9%, Critical (CVSS 9.8) - [CVE-2019-1650](https://www.precursorintelligence.com/what-is/cve-2019-1650): 3.5%, High (CVSS 8.8) - [CVE-2020-3374](https://www.precursorintelligence.com/what-is/cve-2020-3374): 1.9%, Critical (CVSS 9.9) - [CVE-2021-1614](https://www.precursorintelligence.com/what-is/cve-2021-1614): 1.2%, Medium (CVSS 5.3) - [CVE-2018-15387](https://www.precursorintelligence.com/what-is/cve-2018-15387): 1.1%, Critical (CVSS 9.8) - [CVE-2021-1589](https://www.precursorintelligence.com/what-is/cve-2021-1589): 1.0%, Medium (CVSS 6.5) - [CVE-2022-20844](https://www.precursorintelligence.com/what-is/cve-2022-20844): 0.9%, Medium (CVSS 5.3) ## Questions ### How many vulnerabilities does SD-WAN have? We track 27 published vulnerabilities listed under the name SD-WAN, across 84 versions. The most recent SD-WAN flaw added to the known-exploited list is CVE-2022-20775, on 25 February 2026. ### Which SD-WAN vulnerabilities are being exploited? 1 is on the list of flaws known to be exploited. The most recently added is CVE-2022-20775. ### Why are newer SD-WAN flaws missing from this page? Cisco also lists SD-WAN under more specific names, such as SD-WAN Vmanage and SD-WAN Firmware. Flaws listed only under those names are counted on their own pages, not here. Open the release you run to see its own list. ### Which versions of SD-WAN do the exploited flaws affect? Each flaw names its own versions, usually as ranges. The newest, CVE-2022-20775, affects 20.6 to before 20.6.3, 20.7 to before 20.7.2, 20.8. The versions for every exploited flaw are listed on this page. ### How do I get alerts for SD-WAN? Create a Precursor Intelligence account and track SD-WAN. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook. ## Running SD-WAN? Precursor Intelligence keeps checking for you: - **Tell us what you run.** Pick your software from a list, or let us work it out from your website. - **We match it to every flaw.** Over 400,000 published flaws, checked against your list. - **Ranked by real-world risk.** Every flaw gets a 0 to 100 risk score, kept up to date, led by evidence criminals are using it. - **Told as soon as we know.** An alert by email, in the app or by webhook to your own tools. Start free (no card, nothing to install): https://www.precursorintelligence.com/register Book a demo: https://www.precursorintelligence.com/contact