Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:cisco:catalyst_sd-Wan_manager:*:*:*:*:*:*:*:*

3 briefs RSS
critical threat

Active Exploitation of Cisco Catalyst SD-WAN Manager Authentication Bypass (CVE-2026-76504)

Attackers are actively exploiting an unauthenticated API authentication bypass vulnerability (CVE-2026-76504) in Cisco Catalyst SD-WAN Manager to gain administrative control via URL-encoded HTTP requests.

exploited Catalyst SD-WAN Manager +1 vulnerability cisco sdwan authentication-bypass
3c
high advisory

CVE-2026-7473: Arista EOS Incomplete Comparison Vulnerability Leading to Incorrect Packet Forwarding

Arista Extensible Operating System (EOS) contains CVE-2026-7473, an incomplete comparison vulnerability that allows a switch to incorrectly decapsulate and forward unexpected tunneled packets if their destination IP matches the switch's configured decapsulation IP, potentially leading to unauthorized network access or bypass of security controls.

PoC Extensible Operating System +4 vulnerability cve network-device infrastructure
2r 3t 3c updated
critical advisory

Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

A vulnerability in the peering authentication of Cisco Catalyst SD-WAN Controller and Manager (CVE-2026-20182) could allow a remote, unauthenticated attacker to bypass authentication and obtain administrative privileges by sending crafted requests.

PoC Catalyst SD-WAN Controller +7 authentication bypass privilege escalation cisco sd-wan
2r 2t 2c 5i updated