Warning: Critical Cisco Catalyst SD-WAN Manager authentication bypass grants admin API access. Actively exploited, Patch Immediately!

**Cisco Catalyst SD-WAN Manager authentication-bypass (CVE-2026-76504) — critical (CVSS 9.8):** An unauthenticated remote attacker can bypass API session authentication by exploiting improper handling of URI-encoded characters to gain administrator privileges; Cisco confirmed active exploitation in September 2026 and CISA has included the CVE in its Known Exploited Vulnerabilities catalogue, with recommendations to patch immediately and enhance log monitoring using Cisco's published indicators.