CISA Warns of Cisco Catalyst SD-WAN Manager Vulnerabilities Exploited in Attacks

CISA added three critical Cisco Catalyst SD‑WAN Manager vulnerabilities to its KEV catalog with an urgent remediation deadline; the flaws enable unauthenticated data disclosure, malicious file upload granting vmanage privileges, and local credential recovery leading to DCA-level escalation, prompting Emergency Directive 26-03 and hunt/hardening guidance.