CISA Warns of Cisco Catalyst SD-WAN Manager Vulnerabilities Exploited in Attacks

CISA warns that three critical vulnerabilities in Cisco Catalyst SD-WAN Manager are being actively exploited in the wild; combined they allow information disclosure, system file overwrite to gain vManage-level privileges, and credential extraction for escalation, potentially enabling full network compromise. Organizations are directed to apply Emergency Directive 26-03 and Cisco hardening guidance immediately, or discontinue use until mitigations are applied.