VIRY.CZRADAR
sektor
téma
typ textu
zrušit filtry

Výsledky hledání

CVE: CVE-2026-76504× téma: identita× v celém archivu zrušit filtry

2 karet z 5 položek CZ · EN/orig

SPOJENO PŘES CVE Cisco security advisory (AV26-978)

Serial Number: AV26-978 Date: October 1, 2026 As of September 30, 2026, Cisco is affected by a vulnerability in the following product: Cisco Catalyst SD-WAN Manager Versions prior to 20.9.10.1, 20.12.8.2, 20.15.6.1, 20.18.4.1, 26.1.2.1 et 26.2.1 On September 30, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-76504 to their Known Exploited Vulnerabilities (KEV) Database. The Cyber Centre encourages users and administrators to review the provided web links and apply…

KEV ✓ EPSS 0.39 CVSS 9.8 CVE-2026-76504 Cisco CA HU FI FR US IT

tg: zneužíváno tg: zranitelnost tp: identita

· Cyber Centre Kanada · Cisco security advisory (AV26-978) · NKI Maďarsko · Riasztás a Cisco Catalyst SD-WAN Manager rendszert érintő sérülékenységről · zachyceno · NCSC-FI · Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability · zachyceno · CERT-FR – avis · Vulnérabilité dans Cisco Catalyst SD-WAN (01 octobre 2026) · BleepingComputer · Cisco warns of new SD-WAN zero-day exploited in attacks · CSIRT Itálie (ACN) · Cisco: rilevato sfruttamento in rete di una vulnerabilità in Catalyst SD-WAN Manager · Cisco PSIRT · Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability · zachyceno · CISA KEV · Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability (CVE-2026-76504)

Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)

OverviewOn September 30, 2026, Cisco published a security advisory for CVE-2026-76504, a critical API authentication bypass vulnerability affecting Cisco Catalyst SD-WAN Manager. The vulnerability has a CVSSv3.1 score of 9.8 and results from improper handling of URL encoding (CWE-177). An unauthenticated, remote attacker can send a crafted HTTP request that bypasses an authentication rule for a specific API endpoint, gaining access to the API with the privileges of the admin user.According to…

KEV ✓ EPSS 0.91 CVSS 9.8 CVE-2026-20127 CVE-2026-20182 CVE-2026-76504 Cisco US

tg: zneužíváno tg: zranitelnost tp: identita

· Rapid7 · Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)