CISA Alerts Defenders to Exploited Cisco Catalyst SD-WAN Manager Security Flaws

CISA has warned of active exploitation of three critical vulnerabilities in Cisco Catalyst SD-WAN Manager (CVE-2026-20133, CVE-2026-20122, CVE-2026-20128) that can expose sensitive data, allow attackers to overwrite system files through privileged APIs, and recover stored passwords to escalate to management-level privileges; agencies and organizations are required to apply emergency mitigations under Emergency Directive 26-03 within a strict deadline or discontinue use of the affected product.