Výsledky hledání

CVE: CVE-2026-76504× výrobce: Cisco× v celém archivu zrušit filtry

2 karet z 5 položek CZ · EN/orig

30. 9. 2026 17:09

Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)

OverviewOn September 30, 2026, Cisco published a security advisory for CVE-2026-76504, a critical API authentication bypass vulnerability affecting Cisco Catalyst SD-WAN Manager. The vulnerability has a CVSSv3.1 score of 9.8 and results from improper handling of URL encoding (CWE-177). An unauthenticated, remote attacker can send a crafted HTTP request that bypasses an authentication rule for a specific API endpoint, gaining access to the API with the privileges of the admin user.According to…

KEV ✓ EPSS 0.92 CVSS 9.8 CVE-2026-20127 CVE-2026-20182 CVE-2026-76504 Cisco US

tg: zneužíváno tg: zranitelnost tp: identita

30. 9. 2026 17:09 · Rapid7 · Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)

30. 9. 2026 16:46

SPOJENO PŘES CVE Cisco warns of new SD-WAN zero-day exploited in attacks

Cisco released security updates to address a critical zero-day in the Catalyst SD-WAN Manager (tracked as CVE-2026-76504) that attackers are actively exploiting to escalate to admin privileges. [...]

KEV ✓ CVE-2026-76504 Cisco US IT

tg: zneužíváno tg: zranitelnost tp: identita

30. 9. 2026 16:46 · BleepingComputer · Cisco warns of new SD-WAN zero-day exploited in attacks 30. 9. 2026 15:42 · CSIRT Itálie (ACN) · Cisco: rilevato sfruttamento in rete di una vulnerabilità in Catalyst SD-WAN Manager 30. 9. 2026 15:00 · Cisco PSIRT · Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability 30. 9. 2026 · zachyceno 19:30 · CISA KEV · Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability (CVE-2026-76504)