Sd-Wan — PoC Archivehttps://poc.intelseclab.com/tags/sd-wan/Latest proof-of-concept entries.Hugoen-usMon, 06 Jul 2026 00:00:00 +0000XSpeeder SXZOS Pre-Auth eval() Remote Code Execution (CVE-2025-54322)https://poc.intelseclab.com/pocs/network/2026-07-06_cve-2025-54322-xspeeder-sxzos-preauth-rce/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-06_cve-2025-54322-xspeeder-sxzos-preauth-rce/Critical severity (CVSS 10) — network · CVE-2025-54322. Status: Weaponized. Affects: XSpeeder SXZOS firmware (SD-WAN devices, routers, edge networking equipment). Tags: xspeeder, sxzos, sd-wan, router, firmware, python, django, eval-injection, pre-auth, rce, cwe-95.networkCriticalxspeedersxzossd-wanrouterfirmwarepythondjangoeval-injectionpre-authrcecwe-95Cisco Catalyst SD-WAN Peering Authentication Bypass — CVE-2026-20182https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-20182-cisco-sdwan-auth-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-20182-cisco-sdwan-auth-bypass/Critical severity (CVSS 10) — network · CVE-2026-20182. Status: Weaponized. Affects: Cisco Catalyst SD-WAN Controller (formerly vSmart) and Cisco Catalyst SD-WAN Manager (formerly vManage) — vdaemon control-connection process. Tags: cisco, sd-wan, vdaemon, dtls, authentication-bypass, netconf, vmanage, vsmart.networkCriticalciscosd-wanvdaemondtlsauthentication-bypassnetconfvmanagevsmartCisco Catalyst SD-WAN Manager Arbitrary File Write (CVE-2026-20262)https://poc.intelseclab.com/pocs/network/2026-07-01_cve-2026-20262-cisco-sdwan-manager-file-write/Wed, 01 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-01_cve-2026-20262-cisco-sdwan-manager-file-write/Medium severity (CVSS 6.5) — network · CVE-2026-20262. Status: PoC. Affects: Cisco Catalyst SD-WAN Manager (formerly SD-WAN vManage). Tags: path-traversal, file-write, Cisco, SD-WAN, vManage, authenticated, CWE-22, active-exploitation.networkMediumpath-traversalfile-writeCiscoSD-WANvManageauthenticatedCWE-22active-exploitationCisco Catalyst SD-WAN Manager Privilege Escalation (CVE-2026-20245)https://poc.intelseclab.com/pocs/network/2026-06-28_cve-2026-20245-cisco-sdwan-priv-esc/Sun, 28 Jun 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-06-28_cve-2026-20245-cisco-sdwan-priv-esc/High severity (CVSS 7.8) — network · CVE-2026-20245. Status: PoC. Affects: Cisco Catalyst SD-WAN Manager (vManage), SD-WAN Controller (vSmart), SD-WAN Validator (vBond). Tags: privilege-escalation, Cisco, SD-WAN, vManage, file-upload, command-injection, root, CISA-KEV, no-patch, Mandiant, nation-state.networkHighprivilege-escalationCiscoSD-WANvManagefile-uploadcommand-injectionrootCISA-KEVno-patchMandiantnation-state