US Agencies Face CISA Deadline Over Critical Cisco SD-WAN Flaw

CISA and Cisco Talos disclosed that a critical authentication-bypass vulnerability (CVE-2026-20127, CVSS 10) in Cisco Catalyst SD‑WAN systems has been actively exploited by a threat actor identified as UAT-8616 to gain administrative access and persist by downgrading software; federal agencies are under emergency directives to patch, collect artifacts, harden networks, and rebuild systems if root was accessed.