SecurityBleepingComputerabout 2 hours ago
Cisco Warns of Exploited SD-WAN Zero-Day
3 min read
Cisco disclosed CVE-2026-76504, a critical authentication bypass in Catalyst SD-WAN Manager, on September 30. Unauthenticated attackers can gain admin privileges via a crafted HTTP request. Cisco confirmed active exploitation in September 2026 and urged immediate upgrades. It is the fifth SD-WAN zero-day exploited this year, following four patched since February. Fixed releases exist but no workaround is available.
Level
Hype check
Tap to vote and see what everyone thinks.
