CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV

AI Summary

CISA added CVE-2026-76504, a CVSS 9.8 authentication bypass in Cisco Catalyst SD-WAN Manager, to its Known Exploited Vulnerabilities catalog after confirmed active exploitation allowing unauthenticated remote attackers to gain administrative access. Organizations using Cisco SD-WAN Manager must apply patches immediately, as there is no available workaround and the flaw exposes network management plane infrastructure.

Read full article → https://thehackernews.com/2026/10/cisa-adds-exploi…

Relevance score: 90.0/100

# More from October 02

1
Hackers stole Pentagon personnel records of over 3 million people BleepingComputer
2
Fortinet warns of critical FortiMail flaw exploited in zero-day attacks BleepingComputer
4
Bitget Confirms Third-Party Zero-Day Behind $387.5 Million Cryptocurrency Theft The Hacker News
5
Police dismantle KillSec ransomware gang allegedly led by 16-year-old BleepingComputer
6
Citrix NetScaler Post-Exploitation Payload Creates Superuser, Maps Web Shell to CSS-Like URLs The Hacker News
7
Russian state hackers use new RedFlick technique to push malware BleepingComputer
8
Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path The Hacker News
9
Zimbra Vulnerability Exploited in the Wild Prior to Public Disclosure SecurityWeek
10
OpenAI Disrupts Reasoning Extraction Campaign Linked to Moonshot AI Associates The Hacker News