CISA flags new SD-WAN flaw as actively exploited in attacks

CISA added a Cisco Catalyst SD-WAN Manager information-disclosure vulnerability (CVE-2026-20133) to its Known Exploited Vulnerabilities catalog and ordered U.S. federal agencies to patch within days after evidence of active exploitation; the report also references multiple other recently exploited or patched high-severity Cisco flaws and prior zero-day activity affecting network management and firewall products.