CISA adds an authentication-bypass vulnerability in Cisco Catalyst SD-WAN Manager to its Known Exploited Vulnerabilities catalog after reports of active exploitation. Tracked as CVE-2026-76504, the flaw has a CVSS score of 9.8 and can let an unauthenticated remote attacker access an affected system.
Active exploitation and the possibility of unauthenticated remote access make this a high-priority risk for organizations running Cisco Catalyst SD-WAN Manager. CISA’s KEV listing flags the flaw for urgent attention by defenders.
