Skip to content
Vulnerability intelligence

CVE-2026-20127 — Security Advisory

One encoded letter in a web address can defeat an API login rule. It can also slip past simple log searches.

2026
What WebPulse reported · 1 analysis
Cisco SD-WAN Manager flaw lets attackers skip login; Cisco says it is exploited

One encoded letter in a web address can defeat an API login rule. It can also slip past simple log searches.

September 30, 2026
View CVE-2026-20127 on the NIST National Vulnerability Database →
Related vulnerabilities
CVE-2026-9082 CVE-2026-60137 CVE-2026-50549 CVE-2026-50548 CVE-2026-8206 CVE-2026-8181 CVE-2026-63030 CVE-2026-10795