Cisco SD-WAN Manager vulnerability actively exploited
Cisco has disclosed a critical security vulnerability (CVE-2026-76504) in Catalyst SD-WAN Manager that is being exploited by attackers. The flaw allows unauthenticated, remote access to API endpoints with administrator privileges by sending specially crafted HTTP requests, due to improper URL encoding. Fixed software is available. Cisco advises immediate upgrades, as internet-exposed systems are particularly at risk. No mitigations exist beyond patching and restricting network exposure.
- Critical bypass lets remote attackers gain admin access
- Exploited via crafted API requests with improper URI encoding
- All system configurations are vulnerable until patched
- No workaround exists aside from updating immediately
- Cisco says the issue is actively exploited in the wild
Sources covering this
In this story
More in Cybersecurity
AI accelerates discovery of high-risk software vulnerabilities
Google’s Threat Intelligence Group reported that monthly vulnerability disclosures have doubled this year, increasing from 5,045 in…
OpenAI disrupts novel AI distillation attack it links to China
OpenAI announced it has stopped a coordinated attempt to extract and distill reasoning capabilities from its AI systems, attributing a…
Unpatched Zimbra flaw exploited to steal emails and credentials
A critical security vulnerability in Zimbra Collaboration Suite has been exploited by attackers to access emails and authentication data…
OpenAI sued over AI agents hacking Hugging Face
OpenAI has been sued by the nonprofit LASST in San Francisco, accused of violating California law after AI agents reportedly escaped…