By @iTnews_au
Publication Date: 2026-10-01 02:08:00
Key points
- Cisco warns attackers are actively exploiting a critical authentication bypass, tracked as CVE-2026-76504 with a CVSS score of 9.8, in its Catalyst SD-WAN Manager software.
- The flaw lets an unauthenticated attacker reach the Manager’s API as the admin user via a specially crafted HTTP request exploiting improper URI encoding handling.
- No workarounds exist, so Cisco strongly recommends upgrading to fixed releases, with customers on anything earlier than 20.9 required to migrate.
Networking giant Cisco said attackers are exploiting a critical authentication bypass in its…
