fevar54/cve-2026-20224---xxe-injection-en-cisco-catalyst-sd-wan-managerPoC de CVE-2026-20224: inyeccion XXE para lectura de archivos en Cisco Catalyst SD-WAN Manager (no autenticado).
THIS TOOL IS EXCLUSIVELY FOR EDUCATIONAL AND RESEARCH PURPOSES
This exploit is intended exclusively for authorized red team operations, penetration testing, and security research on systems where you have explicit written authorization. Any unauthorized use is illegal and strictly prohibited. The author is not responsible for the misuse of this tool.
Use it at your own risk.
A vulnerability in the web interface of Cisco Catalyst SD-WAN Manager (formerly SD-WAN vManage) allows an unauthenticated remote attacker to read arbitrary files stored on an affected system. The attacker does not need valid user credentials.
This vulnerability is due to improper handling of XML External Entity (XXE) inputs when parsing an XML file. An attacker could exploit this vulnerability by sending a crafted request to the affected system.
| Metric | Value |
|---|---|
| CVSS Base Score | 8.6 (HIGH) |
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N |
| Remote Attack | Yes |
| Authentication Required | No |
| Complexity | Low |
| Confidentiality Impact | High |
| Integrity Impact | None |
| Availability Impact | None |
| Release | First Fixed Version |
|---|---|
| < 20.9 | Migrate to fixed version |
| 20.9 | 20.9.9.1 |
| 20.10 | 20.12.7.1 |
| 20.11 | 20.12.7.1 |
| 20.12 | 20.12.5.4 / 20.12.6.2 / 20.12.7.1 |
| 20.13 | 20.15.5.2 |
| 20.14 | 20.15.5.2 |
| 20.15 | 20.15.4.4 / 20.15.5.2 |
| 20.16 | 20.18.2.2 |
| 20.18 | 20.18.2.2 |
| 26.1 | 26.1.1.1 |
# Clonar el repositorio
git clone https://github.com/fangbarristerbar/CVE-2026-20224-POC.git
cd CVE-2026-20224-POC
# Instalar dependencias
pip install -r requirements.txt
⚠️ Warning this tool is extremely dangerous and should only be used: On systems where you have explicit written authorization For authorized penetration testing For security research in controlled environments Unauthorized use constitutes a computer crime under laws such as the CFAA (USA) and similar regulations in other countries.