Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager

vulnerability

Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager

A critical zero-day vulnerability (CVE-2026-76504) in Cisco SD-WAN Manager allows unauthenticated remote access to the API, potentially leading to compromise. Cisco has confirmed active exploitation of this flaw as of Se…

The Hacker News · Sep 30, 2026 CriticalCVSS 10.0KEVEPSS 92%

CVE-2026-76504 CVE-2026-20182 CVE-2026-20245 zero-day authentication api

vulnerability

Cisco Patches Exploited Catalyst SD-WAN Zero-Day Vulnerability

The flaw could allow remote, unauthenticated attackers to access vulnerable appliances with administrative privileges. The post Cisco Patches Exploited Catalyst SD-WAN Zero-Day Vulnerability appeared first on SecurityWee…

SecurityWeek · Oct 1, 2026 CriticalCVSS 9.8KEV

CVE-2026-76504 zero-day sd-wan cve-2026-76504

vulnerability

CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical authentication bypass vulnerability (CVE-2026-76504, CVSS: 9.8) to its KEV list, impacting Cisco Catalyst SD-WAN Manager.

The Hacker News · Oct 1, 2026 CriticalCVSS 9.8KEV

CVE-2026-76504 cve authentication uri encoding

news.mlab.sh

Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager