Critical authentication-bypass vulnerability in Cisco SD-WAN Manager actively exploited

Cisco said attackers are actively exploiting the critical zero-day vulnerability CVE-2026-76504 in Cisco Catalyst SD-WAN Manager. The flaw could allow a remote attacker with no login access to use the Manager’s API as the administrator user.