sd-wan
Safeguard articles tagged "sd-wan" — guides, analysis, and best practices for software supply chain and application security.
4 articles
A Read-Only API Key Was Enough to Overwrite Files on Cisco SD-WAN Manager
CVE-2026-20122, an additional Cisco Catalyst SD-WAN Manager finding beyond this series' earlier coverage, shows how a low-privilege API credential can still enable a file-write escalation.
Cisco's Catalyst SD-WAN Line Produced Seven Confirmed-Exploited CVEs in a Year
From a perfect-10 peering authentication bypass to CLI privilege escalation, seven distinct vulnerabilities across Cisco's SD-WAN Controller, Manager, and underlying software were confirmed exploited.
Arista's SD-WAN Orchestrator Had a Perfect-10 Privileged-Access Bug
CVE-2026-16812 gives a remote attacker access to privileged internal functionality on Arista's on-premises VeloCloud Orchestrator — the single console managing an entire SD-WAN fleet.
CVE-2026-20262: Cisco Catalyst SD-WAN Manager Zero-Day File-Write Exploited in the Wild
Cisco confirmed limited in-the-wild exploitation of CVE-2026-20262, an arbitrary file-write zero-day in Catalyst SD-WAN Manager, alongside CVE-2026-20245. Here's what the chain actually buys an attacker and why edge management planes keep ending up on the KEV list.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.