CVE-2026-76504

Stories

1. 

   CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV

   CISA adds an authentication-bypass vulnerability in Cisco Catalyst SD-WAN Manager to its Known Exploited Vulnerabilities catalog after reports of active exploitation. Tracked as CVE-2026-76504, the flaw has a CVSS score of 9.8 and can let an unauthenticated remote attacker access an affected system.

   The Hacker NewsOct 1

2. 

   Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager

   Attackers are exploiting a critical zero-day authentication bypass in Cisco Catalyst SD-WAN Manager, allowing remote access to the Manager’s API as an admin user without login. Cisco has fixed releases available, and there is no workaround.

   The Hacker NewsSep 30

Topics

• Security

Publishers

• The Hacker News