> TritonInfoSec News
Home / May 17, 2026 / Story
0
#2 SecurityWeek general May 15, 2026 at 06:28 UTC

Cisco Patches Another SD-WAN Zero-Day, the Sixth Exploited in 2026

By Eduard Kovacs

AI Summary

Cisco patched CVE-2026-20182, a sixth SD-WAN zero-day exploited in 2026, attributed to sophisticated threat actor UAT-8616. CISA added the critical authentication bypass flaw to its Known Exploited Vulnerabilities catalog and mandated Federal Civilian Executive Branch agencies remediate by May 17, 2026. The repeated exploitation of Cisco SD-WAN infrastructure by this actor signals a sustained, targeted campaign against network edge devices.

Read full article → https://www.securityweek.com/cisco-patches-another…

Relevance score: 87.0/100

# More from May 17

  1. 1
    Microsoft warns of Exchange zero-day flaw exploited in attacks BleepingComputer
  2. 3
    Turla Turns Kazuar Backdoor Into Modular P2P Botnet for Persistent Access The Hacker News
  3. 4
    Popular node-ipc npm package compromised to steal credentials BleepingComputer
  4. 5
    OpenAI Hit by TanStack Supply Chain Attack SecurityWeek
  5. 6
    Microsoft Exchange, Windows 11 hacked on second day of Pwn2Own BleepingComputer
  6. 7
    Funnel Builder WordPress plugin bug exploited to steal credit cards BleepingComputer
  7. 8
    Avada Builder WordPress plugin flaws allow site credential theft BleepingComputer
  8. 9
    PoC Code Published for Critical NGINX Vulnerability SecurityWeek
  9. 10
    Microsoft backpedals: Edge to stop loading passwords into memory BleepingComputer