Cisco's SD-WAN Manager Zero-Day Lets Attackers In as Admin
Cisco patched CVE-2026-76504, a 9.8-severity authentication bypass in Catalyst SD-WAN Manager, on September 30, 2026. Attackers are already exploiting it.
By TPW Editorial8 min read
#cisco
4 stories · “cisco”.
Cisco's Identity Engine Has Nine New Flaws, and One Scores a Perfect 10
Cisco disclosed nine Identity Services Engine vulnerabilities on September 16; an unauthenticated 10.0 bypass is already being exploited in the wild.
By TPW Editorial8 min read
Cisco's Email Gateway Zero-Day Hands Attackers Root From a Single Message
Cisco disclosed CVE-2026-76461, a 9.8 SQL injection in Secure Email Gateway that is already exploited; CISA set a September 17 patch deadline.
By TPW Editorial8 min read
Cisco Firewalls Are Under Active Attack, and CISA Just Set a 48-Hour Clock
Nation-state hackers and ransomware crews are exploiting two Cisco firewall-management flaws. Cisco Talos detailed three intrusion clusters this week; federal agencies must patch by September 12.
By TPW Editorial3 min read