Cisco SD-WAN zero-day exploited to create rogue root accounts

Mandiant has detailed a sophisticated attack chain targeting Cisco Catalyst SD-WAN Manager devices at a communications service provider. The threat actors exploited CVE-2026-20245, a high-severity command injection vulnerability, to escalate privileges after gaining initial access to the management …

View Post on Scour ↗

More from 4sysops on Scour.