2026-002: Multiple Vulnerabilities in Cisco Products

CERT-EU summarises multiple high- and critical-severity vulnerabilities in Cisco Catalyst SD‑WAN Controller and Manager — notably CVE-2026-20127 (CVSS 10), an authentication-bypass exploited in the wild since 2023 — which can grant administrative/root access, allow configuration manipulation, persistence via downgraded software, information disclosure, and arbitrary file overwrite; the advisory lists affected versions, provides forensic and hunting guidance, IoC examples, and recommends immediate patching and restriction of management interfaces.