#authentication-bypass

Cisco's SD-WAN Manager Zero-Day Lets Attackers In as Admin

Cisco patched CVE-2026-76504, a 9.8-severity authentication bypass in Catalyst SD-WAN Manager, on September 30, 2026. Attackers are already exploiting it.