CERT24Cisco fixes actively exploited authentication bypass vulnerability in SD-WAN Manager — 2026-09-30Loading data…
CERT24Threat Observatory
Period

Cisco fixes actively exploited authentication bypass vulnerability in SD-WAN Manager — 2026-09-30

A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated remote attacker to access an affected system with administrator privileges. In September 2026, Cisco PSIRT became aware of active exploitation of the vulnerability.

← Back to intelligence

Cisco fixes actively exploited authentication bypass vulnerability in SD-WAN Manager — 2026-09-30

A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated remote attacker to access an affected system with administrator privileges. In September 2026, Cisco PSIRT became aware of active exploitation of the vulnerability.