A Vulnerability in Cisco Catalyst SD-WAN Manager Could Allow for Authentication Bypass
ID: 92c2000f-6f6e-592e-bf2e-519f75c5183f
STIX ID: report--92c2000f-6f6e-592e-bf2e-519f75c5183f
Feed Name: CISecurity.org Advisories
Threat Score
A critical authentication bypass (CVE-2026-76504) in Cisco Catalyst SD-WAN Manager's API session authentication, caused by improper URI encoding handling, allows unauthenticated attackers to craft requests that reach protected endpoints and gain administrative API access; Cisco PSIRT reported active exploitation in September 2026 and warns attackers could fully control affected SD-WAN Manager instances.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.