ZoomEye finds 92,162 SD-WAN hosts exposed online amid CVE-2026-76504

ZoomEye found 92,162 hosts with SD-WAN in their page title on the public internet as of 11 October 2026. The count matters because of CVE-2026-76504, a CVSS 9.8 authentication bypass in Cisco Catalyst SD-WAN Manager with no workaround.

• ZoomEye: 92,162 hosts with SD-WAN in page title exposed online
• CVE-2026-76504 in Cisco Catalyst SD-WAN Manager: CVSS 9.8 auth bypass
• Affected releases: 20.9 and earlier, 20.12, 20.15, 20.18, 26.1, 26.2
• A single Catalyst SD-WAN Manager cluster manages up to 12,500 devices