Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

Cisco Catalyst SD-WAN Manager security update for CVE-2026-76504

Security Patch Release
First reported
Last updated
Happening score
H score 52
3 unique sources, 4 articles

Summary

Hide ▲

Cisco released security updates for Catalyst SD-WAN Manager to fix CVE-2026-76504, a critical zero-day that attackers are actively exploiting. The update covers deployments of the network management platform used to administer SD-WAN devices, and Cisco said customers should move to a fixed software release. The flaw can let unauthenticated attackers reach admin privileges remotely.

Related Happenings

CISA MikroTik RouterOS mitigation guidance for CVE-2026-84411

Advisory/Mitigation
H score28 First: 30.09.2026 18:49 Last: 30.09.2026 18:49 Sources 1

About this happening: CISA issued mitigation guidance for MikroTik RouterOS operators affected by CVE-2026-84411, a pre-authentication integer underflow that can enable root code...

Open Happening

Cisco Catalyst SD-WAN unauthorized peering and SSH access campaign

Campaign
H score38 First: 25.06.2026 17:15 Last: 25.06.2026 17:15 Sources 1

About this happening: An active campaign used unauthorized peering connections and SSH access to maintain footholds inside a service provider's Cisco Catalyst SD-WAN environment, increa...

Open Happening

Cisco security patch release for CVE-2026-20245

Security Patch Release
H score38 First: 25.06.2026 00:29 Last: 25.06.2026 00:29 Sources 1

About this happening: Cisco released security updates for Cisco Catalyst SD-WAN after CVE-2026-20245 was linked to root-level command execution, and customers were told to move to fixed sof...

Open Happening

CISA adds CVE-2026-20262 to KEV and orders federal fixes

Public Sector Action
H score32 First: 16.06.2026 09:05 Last: 16.06.2026 09:05 Sources 1

About this happening: CISA added CVE-2026-20262 to its Known Exploited Vulnerabilities (KEV) catalog and required Federal Civilian Executive Branch (FCEB) agencies to apply Cisco's fixe...

Open Happening

Cisco security patch release for CVE-2026-20262

Security Patch Release
H score47 First: 15.06.2026 20:12 Last: 15.06.2026 20:12 Sources 1

About this happening: Cisco released security updates for CVE-2026-20262 in Catalyst SD-WAN Manager, covering multiple release trains after the zero-day was exploited to reach root pr...

Open Happening

Timeline

  1. 30.09.2026 17:46 5 articles · 13d ago

    Cisco releases security updates for critical Catalyst SD-WAN Manager zero-day

    Mitigation Patch Update

    Cisco released security updates for Catalyst SD-WAN Manager to address CVE-2026-76504, a critical zero-day that allows unauthenticated remote attackers to bypass an API authentication rule and reach admin privileges. Cisco said it became aware of active exploitation in September 2026, urged customers to upgrade to a fixed software release, and advised administrators to look for %6a in malicious requests and j_security_check entries in serviceproxy-access.log and vmanage-server.log.

    Show sources
    Open in new tab