Cisco patches actively exploited Catalyst SD-WAN zero-day that can give attackers admin access

Cisco has released fixes for a maximum-severity vulnerability in Cisco Catalyst SD-WAN Controller and Cisco Catalyst SD-WAN Manager that attackers have already exploited in limited real-world attacks. The flaw is tracked as CVE-2026-20182 and carries a CVSS 3.1 score of 10.0. Cisco says an unauthenticated remote attacker can exploit it to bypass authentication and gain […] The post Cisco patches actively exploited Catalyst SD-WAN zero-day that can give attackers admin access appeared first on VPN Central.