Cisco warns of new SD-WAN zero-day exploited in attacks

By Sergiu Gatlan

AI Summary

Cisco disclosed and patched a critical zero-day in Catalyst SD-WAN Manager tracked as CVE-2026-76504, which allows unauthenticated remote attackers to invoke the Manager's API with admin privileges — with no available workaround. The flaw is already being actively exploited in the wild, and fixed releases were made available on September 30. Organizations running Cisco SD-WAN infrastructure should prioritize immediate patching.

Read full article → https://www.bleepingcomputer.com/news/security/cis…

Relevance score: 89.0/100

# More from October 01

1
Citrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Execution The Hacker News
2
Attackers exploited Citrix NetScaler zero-day for at least three weeks undetected CyberScoop
4
Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets The Hacker News
5
Bitget hacked via zero-day in third-party security products BleepingComputer
6
New Spectre-v2 BTR Attack Leaks Linux Memory Despite Existing Defenses The Hacker News
7
Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT The Hacker News
8
Alleged ShinyHunters leader arrested in the Netherlands CyberScoop
9
Russian APT Star Blizzard Uses ‘RedFlick’ Infection Chain in Recent Attacks SecurityWeek
10
Over 543,000 valid credentials exposed in public GitHub repositories BleepingComputer