Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability

CVE v události 3

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 9.8.

Jak se o tom psalo 10

1. 1. 10. 2026 13:09 · Cyber Centre Kanada CA

   Cisco security advisory (AV26-978)

   Serial Number: AV26-978 Date: October 1, 2026 As of September 30, 2026, Cisco is affected by a vulnerability in the following product: Cisco Catalyst SD-WAN Manager Versions prior to 20.9.10.1, 20.12.8.2, 20.15.6.1, 20.18.4.1, 26.1.2.1 et 26.2.1 On September 30, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-76504 to their Known Exploited Vulnerabilities (KEV) Database. The Cyber Centre encourages users and administrators to review the provided web links and apply…

2. 1. 10. 2026 12:24 · NKI Maďarsko HU

   Riasztás a Cisco Catalyst SD-WAN Manager rendszert érintő sérülékenységről

   A Nemzetbiztonsági Szakszolgálat Nemzeti Kiberbiztonsági Intézete riasztást ad ki a Cisco Catalyst SD-WAN Manager API-jának hitelesítését érintő, aktívan kihasznált kritikus sérülékenység miatt. A hibát a Cisco közlése szerint 2026 szeptemberében már aktívan kihasználták. A CVE-2026-76504 azonosítón nyomon követett, kritikus hiba az API munkamenet-alapú hitelesítéskezelésében van. A szoftver nem megfelelően kezeli az URI-kódolást a HTTP-kérésekben, ezért […]

3. 1. 10. 2026 · zachyceno 04:00 · NCSC-FI FI nadpis události

   Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability

   Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8, CVEs: CVE-2026-76504, Summary: A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user. This vulnerability is due to improper handling of URI encoding in an HTTP request, which allows the request to bypass an authentication rule that is intended to…

4. 1. 10. 2026 · zachyceno 15:30 · CERT-FR – avis FR

   Vulnérabilité dans Cisco Catalyst SD-WAN (01 octobre 2026)

   Une vulnérabilité a été découverte dans Cisco Catalyst SD-WAN. Elle permet à un attaquant de provoquer un contournement de la politique de sécurité. Cisco indique que la vulnérabilité CVE-2026-76504 est activement exploitée.

5. 30. 9. 2026 17:09 · Rapid7 US

   Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)

   OverviewOn September 30, 2026, Cisco published a security advisory for CVE-2026-76504, a critical API authentication bypass vulnerability affecting Cisco Catalyst SD-WAN Manager. The vulnerability has a CVSSv3.1 score of 9.8 and results from improper handling of URL encoding (CWE-177). An unauthenticated, remote attacker can send a crafted HTTP request that bypasses an authentication rule for a specific API endpoint, gaining access to the API with the privileges of the admin user.According to…

6. 30. 9. 2026 16:46 · BleepingComputer US

   Cisco warns of new SD-WAN zero-day exploited in attacks

   Cisco released security updates to address a critical zero-day in the Catalyst SD-WAN Manager (tracked as CVE-2026-76504) that attackers are actively exploiting to escalate to admin privileges. [...]

7. 30. 9. 2026 16:43 · NCSC-NL NL

   NCSC-2026-0395 [1.00] [M/H] Kwetsbaarheid verholpen in Cisco Catalyst SD-WAN Manager

   Cisco heeft een kwetsbaarheid verholpen in Cisco Catalyst SD-WAN Manager. De kwetsbaarheid bevindt zich in een API van Cisco Catalyst SD-WAN Manager. Door onjuiste verwerking van URI-encoding kunnen ongeauthenticeerde kwaadwillenden authenticatiemechanismen omzeilen. Hierdoor kan de kwaadwillende administratieve toegang tot het systeem verkrijgen en de controle over het systeem overnemen.

8. 30. 9. 2026 15:42 · CSIRT Itálie (ACN) IT

   Cisco: rilevato sfruttamento in rete di una vulnerabilità in Catalyst SD-WAN Manager

   Cisco ha rilevato lo sfruttamento in rete di una vulnerabilità critica, identificata tramite la CVE-2026-76504, in Cisco Catalyst SD-WAN Manager, soluzione per la gestione di ambienti SD-WAN.

9. 30. 9. 2026 15:00 · Cisco PSIRT US

   Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability

   A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user. This vulnerability is due to improper handling of URI encoding in an HTTP request, which allows the request to bypass an authentication rule that is intended to restrict access to a specific API endpoint. An attacker could exploit this vulnerability by sending a crafted HTTP request to…

10. 30. 9. 2026 · zachyceno 19:30 · CISA KEV US

    Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability (CVE-2026-76504)

    CISA added CVE-2026-76504 to the Known Exploited Vulnerabilities catalog. Affected product: Cisco Catalyst SD-WAN Manager. Remediation due date: 2026-10-03.