Exploited in the Wild: Maximum CVSS 10 SD-WAN Flaw (CVE-2026-20182) Grants Admin Control

**Cisco Talos warning:** Active exploitation of critical Cisco Catalyst SD-WAN vulnerabilities—chiefly CVE-2026-20182 (CVSS 10)—allows unauthenticated remote attackers to gain administrative access and manipulate NETCONF configurations; activity attributed to UAT-8616 and multiple other clusters has resulted in AI-assisted implants, credential-theft tooling, XMRig cryptominers, and persistent web shells, and Cisco has released fixes that should be applied immediately.