Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager

Reported by The Hacker News ([email protected] (The Hacker News))

Summary by Cyber Security News30 Sep 2026, 17:24 CEST

About this summary. This is a short, independently written summary of an article first published by The Hacker News. Cyber Security News did not report or verify the underlying story. Read the original: https://thehackernews.com/2026/09/cisco-warns-of-attackers-exploiting.html

Attackers are exploiting a critical flaw in Cisco Catalyst SD-WAN Manager, the system companies use to manage their Cisco SD-WAN networks, Cisco said in an advisory on September 30. The flaw, CVE-2026-76504, could allow a remote attacker with no login access to use the Manager's API as the admin user. Fixed releases are available, and there is no workaround.

Read the full article at The Hacker News →

Source attribution: headline and facts are from The Hacker News (thehackernews.com). Summary method: excerpt of the source description. See our source attribution policy.

Related coverage

CVE-2026-76504: Cisco SD-WAN Flaw Exploited

Cisco security advisory (AV26-978)

CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV

New Cisco SD-WAN zero-day exploited in-the-wild (CVE-2026-76504)

U.S. CISA adds Cisco Catalyst SD-WAN Manager flaw to its Known Exploited Vulnerabilities catalog

Cisco Catalyst SD-WAN Manager Authentication Bypass Vulnerability Exploited in Attacks (CVE-2026-76504)