Cisco Catalyst SD-WAN Manager Hit with Critical Vulnerability

A critical vulnerability in Cisco's Catalyst SD-WAN Manager has been added to the CISA Known Exploited Vulnerabilities (KEV) list, prompting immediate action from affected enterprises.

The issue, listed as CVE-2026-76504 with a CVSS score of 9.8/10, concerns the authentication mechanism and allows an unauthenticated remote attacker to gain administrative access.

Cisco confirmed in September 2026 that it had been made aware of active exploitation, releasing Indicators of Compromise (IoCs) for administrators to detect suspicious activity.