https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T20:36:59.139210+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-20844 CVE-2022-20844 — Cisco Software-Defined Application Visibility and Control on Cisco vManage Static Username and Password Vulnerability 2026-10-12T20:36:59.152419+00:00

Affected: Cisco SD-WAN vManage

A vulnerability in authentication mechanism of Cisco Software-Defined Application Visibility and Control (SD-AVC) on Cisco vManage could allow an unauthenticated, remote attacker to access the GUI of Cisco SD-AVC using a default static username and password combination. This vulnerability exists because the GUI is accessible on self-managed cloud installations or local server installations of Cisco vManage. An attacker could exploit this vulnerability by accessing the exposed GUI of Cisco SD-AVC. A successful exploit could allow the attacker to view managed device names, SD-AVC logs, and SD-AVC DNS server IP addresses.