Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:cisco:sd-Wan_vbond_orchestrator:*:*:*:*:*:*:*:*

2 briefs RSS
critical threat

Active Exploitation of Cisco Catalyst SD-WAN Manager Authentication Bypass (CVE-2026-76504)

Attackers are actively exploiting an unauthenticated API authentication bypass vulnerability (CVE-2026-76504) in Cisco Catalyst SD-WAN Manager to gain administrative control via URL-encoded HTTP requests.

exploited Catalyst SD-WAN Manager +1 vulnerability cisco sdwan authentication-bypass
3c
critical advisory

Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

A vulnerability in the peering authentication of Cisco Catalyst SD-WAN Controller and Manager (CVE-2026-20182) could allow a remote, unauthenticated attacker to bypass authentication and obtain administrative privileges by sending crafted requests.

PoC Catalyst SD-WAN Controller +7 authentication bypass privilege escalation cisco sd-wan
2r 2t 2c 5i updated