Intelligence online17 sources monitored8 actively exploited 7d26 published 24hChecked recently
Product

Catalyst SD-WAN Manager

Made by Cisco. 5 of its vulnerabilities are known to have been exploited.

Coverage

CriticalAct nowExploitedCISA KEV

Cisco warns of new SD-WAN zero-day exploited in attacks

CISA added CVE-2026-76504 (Cisco Catalyst SD-WAN Manager) to its Known Exploited Vulnerabilities catalog on September 30, 2026, which means there is reliable evidence of exploitation in the wild. Cisco Catalyst SD-WAN Manager contains a hex encoding vulnerability that could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user due to improper handling of URI…

Why it matters

CISA lists this as exploited in the wild. Unpatched Cisco networking & security and Catalyst SD-WAN Manager systems are exposed to active attacks now.

Act now

Treat this as an emergency.

CISA Known Exploited Vulnerabilities · 6 sources
EnterpriseDevelopersSecurity pros

Recent intelligence

The latest developments from the last 30 days, newest first.

  1. Added to CISA KEVUpdateCVE-2026-76504

    CVE-2026-76504 added to CISA KEV: Cisco Catalyst SD-WAN Manager, Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability

    Basis: CISA Known Exploited Vulnerabilities catalog

Actively exploited

CVE-2026-76504CVSS 9.8

Cisco Catalyst SD-WAN Manager

Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability

Added Sep 30, 2026Fed. due Oct 3, 2026Coverage →
CVE-2026-20262CVSS 6.5

Cisco Catalyst SD-WAN Manager

Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability

Added Jun 15, 2026Fed. due Jun 29, 2026
CVE-2026-20245CVSS 7.8

Cisco Catalyst SD-WAN Manager

Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability

Added Jun 9, 2026Fed. due Jun 23, 2026
CVE-2026-20128CVSS 7.5

Cisco Catalyst SD-WAN Manager

Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability

Added Apr 20, 2026Fed. due Apr 23, 2026
CVE-2026-20133CVSS 7.5

Cisco Catalyst SD-WAN Manager

Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

Added Apr 20, 2026Fed. due Apr 23, 2026