Yet another Cisco SD-WAN 0-day under attack, and no patch in sight
ID: 974f0464-eaba-5fa0-bee1-045d5a65740b
STIX ID: report--974f0464-eaba-5fa0-bee1-045d5a65740b
Feed Name: The Register (Security)
Threat Score
### Executive Summary — Cisco Catalyst SD-WAN Manager zero-day Cisco is tracking active exploitation of a high-severity zero-day (CVE-2026-20245) in Catalyst SD-WAN Manager that allows authenticated netadmin users to upload specially crafted files to gain root privileges across on-premises, cloud, and FedRAMP deployments; Cisco has not yet released a patch and recommends mitigations and contacting TAC.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.