CVE-2026-20262: Cisco Catalyst SD-WAN Manager Zero-Day Leads to Root

**CVE-2026-20262** is a zero-day arbitrary file-write (path traversal) vulnerability in Cisco Catalyst SD‑WAN Manager that permits authenticated low-privilege users to create or overwrite files—potentially enabling server-side code deployment and escalation to root; Cisco reports limited in-the-wild exploitation and CISA has added the issue to its Known Exploited Vulnerabilities catalog, with vendor fixed releases and log-based detection guidance provided.