Active exploitation of Cisco Catalyst SD-WAN by UAT-8616 (opens in new tab)

Covered by 6 sources including Malware Analysis, News and Indicators, csoonline.com

Cisco Talos is tracking the active exploitation of CVE-2026-20127, a vulnerability in Cisco Catalyst SD-WAN Controller, formerly vSmart, that allows an unauthenticated remote attacker to bypass authentication and obtain administrative privileges.

Read the original article

Sign in to keep reading the full article.

Sign Up Log In

Covered in 6 articles

Malware Analysis, News and Indicators·

Ongoing exploitation of Cisco Catalyst SD-WAN vulnerabilities

csoonline.com·

Attackers exploiting unpatched Cisco SD-WAN flaw

Tenable Blog·

Frequently asked questions about the continued exploitation of Cisco Catalyst SD-WAN vulnerabilities (CVE-2026-20182)

View all 6 ›