CVE-2026-20182

Corroboration timeline

Each row is the first time that source reported this CVE, so the lag column shows how long each took relative to the earliest report. Corroboration across distinct sources is a confidence signal that a single advisory cannot give you.

1. cisa-kev2026-05-14 00:00 UTCfirst report

   CVE-2026-20182 — Cisco Catalyst SD-WAN: Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

2. rapid7-blog2026-05-14 16:00 UTC+16h

   CVE-2026-20182: Critical authentication bypass in Cisco Catalyst SD-WAN Controller (FIXED)

3. nvd-cve2026-05-14 17:16 UTC+17h

   CVE-2026-20182 — May 2026: This security advisory provides the details and fix information for a vulnerability that was discovered and fixed after the was d

4. tenable-advisories2026-05-15 01:05 UTC+25h

   Frequently asked questions about the continued exploitation of Cisco Catalyst SD-WAN vulnerabilities (CVE-2026-20182)

5. thehackernews2026-05-15 05:28 UTC+29h

   CISA Adds Cisco SD-WAN CVE-2026-20182 to KEV After Admin Access Exploits

How this page is built

ThreatFilter ingests 52 public threat-intelligence feeds. A page is published here only when at least 3 distinct sources report the same CVE — roughly 0.2% of the CVEs seen. Everything above is derived from those feeds; nothing is hand-written, and the timeline is the raw record of what each source published and when.

See the live advisory feed, the full source list, or the analyst tools.