Ongoing exploitation of Cisco Catalyst SD-WAN vulnerabilities (opens in new tab)

Cisco Talos is tracking the active exploitation of CVE-2026-20182, an authentication bypass vulnerability in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, and Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage.Successful exploitation of CVE-2026-20182 allows an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected system.The exploitation of CVE-2026-20182 appears to have been limited so far and Talos clusters this activit...