By Davey Winder
Publication Date: 2026-02-26 14:02:00
Cisco confirms 10/10 zero day vulnerability.
NurPhoto via Getty Images
A zero-day security vulnerability is being exploited in ongoing attacks, posing a “significant cyber threat targeting federal networks utilizing certain Cisco systems and software,” according to U.S. Cybersecurity and Infrastructure Security Agency. Here’s what all enterprises need to know about CVE-2026-20127, that impacts users of the Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, and Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, that can allow a remote hacker to bypass authentication and obtain admin privileges.
Cisco Authentication Bypass Vulnerability Confirmed, Immediate Action Required
When Cisco confirms a zero-day vulnerability with a Common Vulnerability Scoring System severity rating of 10, you need to sit up and pay attention. With attacks already known to be underway, as the CISA…