CVE-2026-76504 Cisco Cisco Catalyst SD-WAN Manager
A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user. This vulnerability is due to improper handling…
- CVSS
- 9.8 Critical
- EPSS
- 39%
- Percentile
- 99
- Published
- 2026-09-30
- Force
- 11 of 12
- Public PoC
- 2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
On CISA’s exploited list
Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
- Added
- 2026-09-30
- Federal patch deadline
- 2026-10-03
- Ransomware use
- not known