Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

Cisco security patch release for CVE-2026-20127

Security Patch Release
First reported
Last updated
Happening score
H score 56
1 unique sources, 1 articles

Summary

Hide ▲

Cisco released a fix for CVE-2026-20127, a critical SD-WAN zero-day that can let a remote unauthenticated attacker gain administrative access. The patch covers Cisco Catalyst SD-WAN Controller and Cisco Catalyst SD-WAN Manager, and agencies in the UK, US, Canada, Australia and New Zealand urged customers to patch immediately because the flaw has been exploited since 2023. Successful exploitation can expose NETCONF and allow attackers to manipulate SD-WAN network configuration, while CISA ordered federal agencies to remediate by February 27, 2026.

Related Happenings

NSA/FBI/CISA router hardening advisory

Advisory/Mitigation
H score33 First: 13.07.2026 12:32 Last: 13.07.2026 12:32 Sources 1

About this happening: NSA, FBI, CISA and 15 allied agencies issued a joint router hardening advisory after hackers targeted vulnerable and poorly configured routers in critical infrastruc...

Open Happening

CISA sets June 28 patch deadline for Cisco Unified Communications Manager Server

Public Sector Action
H score35 First: 26.06.2026 22:43 Last: 26.06.2026 22:43 Sources 1

About this happening: CISA ordered federal agencies to patch CVE-2026-20230 in Cisco Unified Communications Manager Server by June 28, tightening exposure around an actively exploited...

Open Happening

Cisco Catalyst SD-WAN unauthorized peering and SSH access campaign

Campaign
H score38 First: 25.06.2026 17:15 Last: 25.06.2026 17:15 Sources 1

About this happening: An active campaign used unauthorized peering connections and SSH access to maintain footholds inside a service provider's Cisco Catalyst SD-WAN environment, increa...

Open Happening

Cisco security patch release for CVE-2026-20245

Security Patch Release
H score38 First: 25.06.2026 00:29 Last: 25.06.2026 00:29 Sources 1

About this happening: Cisco released security updates for Cisco Catalyst SD-WAN after CVE-2026-20245 was linked to root-level command execution, and customers were told to move to fixed sof...

Open Happening

CISA adds CVE-2026-20262 to KEV and orders federal fixes

Public Sector Action
H score32 First: 16.06.2026 09:05 Last: 16.06.2026 09:05 Sources 1

About this happening: CISA added CVE-2026-20262 to its Known Exploited Vulnerabilities (KEV) catalog and required Federal Civilian Executive Branch (FCEB) agencies to apply Cisco's fixe...

Open Happening

Timeline

  1. 26.02.2026 11:30 2 articles · 4mo ago

    Cisco releases fix for CVE-2026-20127

    Mitigation Patch Update

    Cisco released a fix for CVE-2026-20127 in Cisco Catalyst SD-WAN Controller and Cisco Catalyst SD-WAN Manager, and customers were urged to patch both the new zero-day and the legacy CVE-2022-20775.

    Show sources
    Open in new tab
  2. 26.02.2026 11:30 1 articles · 4mo ago

    Global agencies warn on Cisco SD-WAN zero-day

    Initial Disclosure

    Government security agencies in the UK, US, Canada, Australia and New Zealand urged Cisco customers to take immediate action against a critical zero-day in Cisco Catalyst SD-WAN Controller and Cisco Catalyst SD-WAN Manager that had been exploited since 2023, while CISA issued an emergency directive requiring federal agencies to find and patch CVE-2026-20127 and CVE-2022-20775 by 5pm ET on February 27, 2026.

    Show sources
    Open in new tab