Cisco Catalyst SD-WAN (opens in new tab)

Covers 2 stories including CVE-2026-20182: Critical authentication bypass in Cisco Catalyst SD-WAN Controller (FIXED)

A critical vulnerability, identified as CVE-2026-20182, has been discovered in the peering authentication mechanism of Cisco Catalyst SD-WAN Controller and Cisco Catalyst SD-WAN Manager. This flaw allows an unauthenticated, remote attacker to bypass authentication and gain administrative privileges on affected systems. Successful exploitation could allow attackers to manipulate network configurations within the SD-WAN fabric. - May 18, 2026

Read the original article