Cisco Warns of New SD-WAN Zero-Day Exploited in Attacks

Cisco warns of new SD-WAN zero-day exploited in attacks

Cisco released security updates to address a critical zero-day in the Catalyst SD-WAN Manager (tracked as CVE-2026-76504) that attackers are actively exploiting to escalate to admin privileges.

Cisco flags active exploitation of SD-WAN Manager auth bypass

Cisco says attackers are exploiting a critical authentication bypass in SD-WAN Manager. The issue affects the platform used to centrally manage SD-WAN environments and has been elevated from a theoretical risk to an active intrusion vector.For...

New Cisco SD-WAN zero-day exploited in-the-wild (CVE-2026-76504)

For the fifth time this year, Cisco revealed attackers have exploited a vulnerability (CVE-2026-76504) in its SD-WAN solution in zero-day attacks. The vendor’s incident responders became aware of active exploitation of this vulnerability in September 2026, after getting pinged and resolving a Cisco Technical Assistance Center (TAC) support case. Cisco has yet to share any details about the attacks, but it has provided indicators of compromise de…

Cisco Patches Exploited Catalyst SD-WAN Zero-Day Vulnerability

The flaw could allow remote, unauthenticated attackers to access vulnerable appliances with administrative privileges.

Cisco SD-WAN Manager Authentication 0-day Vulnerability Actively Exploited in the Wild

Cisco has disclosed a critical authentication bypass vulnerability in Cisco Catalyst SD-WAN Manager that attackers are actively exploiting. The flaw, tracked as CVE-2026-76504, could allow an unauthenticated remote attacker to gain administrative access to vulnerable SD-WAN management systems. The vulnerability received a CVSS score of 9.8 and affects Cisco Catalyst SD-WAN Manager regardless of its system configuration. CVE-2026-76504 exists in …