Cisco SD-WAN Vulnerability Exploited in the Wild: Patch CVE-2026-20262 Now

### Executive Summary: Cisco Catalyst SD-WAN Manager (vManage) is affected by CVE-2026-20262 — an authenticated file-upload flaw that can create or overwrite filesystem files and may enable escalation to root. Cisco reports limited active exploitation (notably a suspicious.war file and related web requests), urges immediate patching across affected builds, and provides IOCs and mitigation guidance.