This document describes how to use the Bug Applicability tool to scan admin-tech files for possible Indicators of Compromise (IoCs) related to SD-WAN Product Security Incident Response Team (PSIRT) CVE-2026-20182CSCwt50498
For CSCwt50498, you must generate an admin-tech of your SD-WAN control components. The Controller (vSmart) admin-techs must be generated one at a time.
The admin-techs of other SD-WAN control components can be generated in any order.
Warning: Before upgrading an SD-WAN deployment to a fixed release, retain relevant logs. After upgrading, verify that the system has not been compromised, by checking the logs for the indicators of compromise as documented in these advisories. If the logs show indicators of compromise and you confirm that your system has been compromised, applying the software update alone will not resolve the vulnerability. In such cases, follow the specific remediation steps that are provided by the Cisco Technical Assistance Center (TAC) to help secure the system.
If you need assistance creating these files, please refer to the this document that provides the steps to generate an admin-tech: How to Collect an Admin-Tech in an SD-WAN Environment.

If no indicators are found, a message similar to "CVE-2026-20182 - No Indicators of Compromise (IoCs) detected in logs. Current release is not a fixed release" appears. The message will reference the specific Bug ID being analyzed.
Note: If you have not upgraded yet, please proceed and upgrade immediately to a release containing the fix.

If the tool finds indicators, the message "Potential Indicators of Compromise (IoCs) Detected" appears.
Please open a Cisco TAC case and upload the admin-techs for further manual review.
Note: If you have not upgraded yet, please proceed and upgrade immediately to a release containing the fix.

To analyze another admin-tech, click "Re-run" and enter the applicable Cisco Bug ID (e.g., CSCwt50498) to see the upload section again. Other options include scrolling up and clicking "Check <Bug ID>" or typing the bug ID into the chat.

After analyzing an admin-tech, these additional options are available in the tool:
| Revision | Publish Date | Comments |
|---|---|---|
3.0 |
28-May-2026
|
Warning added |
2.0 |
15-May-2026
|
Documentation Update |
1.0 |
14-May-2026
|
Initial Release |