Security2 hOctober 15, 2026, 17:41

CVE-2026-76504: Critical auth bypass in Cisco Catalyst SD-WAN Manager

Cisco disclosed CVE-2026-76504 in Catalyst SD-WAN Manager with a CVSS score of 9.8, allowing an unauthenticated remote attacker to gain admin privileges on the controller. CISA added it to the Known Exploited Vulnerabilities catalog on September 30, 2026, with a remediation deadline of October 3 for federal agencies.

DEV Community

Open source

CVE-2026-76504: Critical auth bypass in Cisco Catalyst SD-WAN Manager

CVSS 9.8, CWE-177: auth bypass via the management API
CISA added it to KEV on September 30, 2026, citing active exploitation
ZoomEye found 441 assets exposing the app="vManage" fingerprint
NCSC-NL advises checking logs for IoCs before patching

#Cisco#CISA

Cisco warns of active exploitation of CVSS 9.8 SD-WAN Manager auth bypass

Security

Cisco Patches Exploited Catalyst SD-WAN Zero-Day

Security

Cisco FMC CVE-2026-20079 exploited: auth bypass with CVSS 10.0

Security

CVE-2026-76504: Critical auth bypass in Cisco Catalyst SD-WAN Manager

Cisco warns of active exploitation of CVSS 9.8 SD-WAN Manager auth bypass

Cisco Patches Exploited Catalyst SD-WAN Zero-Day

Cisco FMC CVE-2026-20079 exploited: auth bypass with CVSS 10.0

Citrix NetScaler CVE-2026-19490: second auth bypass in one quarter