Home / Jun 07, 2026 / Story
0
#2 SecurityWeek general June 05, 2026 at 05:47 UTC

Cisco Warns of 7th SD-WAN Zero-Day Exploited in 2026

By Eduard Kovacs

AI Summary

Cisco has confirmed active exploitation of CVE-2026-20245 (CVSS 7.8) in Catalyst SD-WAN Manager — the 7th SD-WAN zero-day exploited in 2026 — with no patch yet available. The flaw enables arbitrary command execution as root and affects on-premises, Cloud-Pro, Cisco-managed cloud, and FedRAMP government deployments, making it an immediate priority for network security teams.

Relevance score: 90.0/100

# More from June 07