Cisco SD-WAN Zero-Day Exploited Months Before Patching

CVE-2026-20245, the seventh Cisco SD-WAN vulnerability exploited in 2026, was used for months before disclosure and patching. The zero-day allowed attackers to compromise devices without detection.