Cisco SD-WAN Manager Auth Bypass: Actively Exploited, No Workaround (CVE-2026-76504)
This story is from 2026-10-19. It is preserved in the archive; the latest stories are on the live feed.
TL;DR On September 30, 2026, Cisco published the advisory cisco-sa-sdwan-webauth-xr8beuuU for CVE-2026-76504: a critical authentication bypass in Catalyst SD-WAN Manager, formerly Viptela vManage. Base CVSS score 9.8, CWE-177. The cause is narrow and mechanical: improper handling of URI encoding in…
Read the full story at DEV Community — AI ↗
Timeline · 1 report
- 2026-10-19 09:00 · DEV Community — AI
Cisco SD-WAN Manager Auth Bypass: Actively Exploited, No Workaround (CVE-2026-76504)