CVE-2022-20775: listed in the CISA KEV catalog

CVE-2022-20775 · CVSS 7.8 HIGH · EPSS 12% · KEV 2026-02-25

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. This vulnerability is due to improper access controls on commands within the application CLI. An attacker could exploit this vulnerability by running a maliciously crafted command on the application CLI. A successful exploit could allow the attacker to execute arbitrary commands as the root user. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF

Is CVE-2022-20775 exploited?

• Listed in the CISA KEV catalog on 2026-02-25.
• Federal remediation due 2026-02-27.
• Past that date by 169 days.
• EPSS puts exploitation in the next 30 days at 12%.
• Public exploit code: none found in monitored sources.

Which products and versions are affected?

No affected package list recorded here yet.

Is there a patch?

No patch identifier recorded here yet.

What PlainSec published about CVE-2022-20775

• CISA Adds Two Known Exploited Vulnerabilities to Catalog | CISA (2026-03-14)

Primary sources

• NVD record
• CISA KEV catalog

What this record does not say

• No affected package data.
• No patch identifier.

KEV and EPSS are re-checked daily. Record last updated 2026-08-11.