Back to article

Rapid7 Cybersecurity Blog

CVE-2026-20182: Critical authentication bypass in Cisco Catalyst SD-WAN Controller (FIXED) (opens in new tab)

Covers Active exploitation of Cisco Catalyst SD-WAN by UAT-8616Covered by 12 sources including BleepingComputer, theregisterDiscussed on Hacker News

Covers 1 related story

Cisco Talos Blog·

Active exploitation of Cisco Catalyst SD-WAN by UAT-8616

Covered in 13 articles

BleepingComputer·

Cisco warns of new critical SD-WAN flaw exploited in zero-day attacks

Patch time for Cisco SD-WAN admins as vendor drops yet another make-me-admin zero-day

Cisco Patches Another SD-WAN Zero-Day, the Sixth Exploited in 2026

The Hacker News·

Cisco Catalyst SD-WAN Controller Auth Bypass Actively Exploited to Gain Admin Access

Security Affairs·

INTERNATIONAL EDITION

Security Affairs·

U.S. CISA adds a flaw in Cisco Catalyst SD-WAN to its Known Exploited Vulnerabilities catalog

Cisco warns of an actively exploited SD-WAN flaw with max severity

Kudelski Security Research·

Cisco Catalyst SD-WAN

Risky Business #838 -- GitHub investigates possible breach

news.risky.biz·

Risky Bulletin: Shai-Hulud goes open-source

In other languages

Cisco corrige sexta falha zero-day em SD-WAN