Product

Cisco Catalyst SD-WAN Manager

2 briefs RSS

CVE-2026-7473: Arista EOS Incomplete Comparison Vulnerability Leading to Incorrect Packet Forwarding

Arista Extensible Operating System (EOS) contains CVE-2026-7473, an incomplete comparison vulnerability that allows a switch to incorrectly decapsulate and forward unexpected tunneled packets if their destination IP matches the switch's configured decapsulation IP, potentially leading to unauthorized network access or bypass of security controls.

PoC Extensible Operating System +4 vulnerability cve network-device infrastructure

2r 3t 3c updated 3w ago

critical advisory

Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

2 rules 2 TTPs 2 CVEs 5 IOCs

A vulnerability in the peering authentication of Cisco Catalyst SD-WAN Controller and Manager (CVE-2026-20182) could allow a remote, unauthenticated attacker to bypass authentication and obtain administrative privileges by sending crafted requests.

PoC Catalyst SD-WAN Controller +7 authentication bypass privilege escalation cisco sd-wan

2r 2t 2c 5i updated Jul 12, 2026