🛡️ **CISCO SD-WAN MANAGER AUTHENTICATION BYPASS ZERO-DAY ACTIVELY EXPLOITED**
Published Thursday, October 01, 2026 at 11:53 AM PT BLUF: Cisco Catalyst SD-WAN Manager is vulnerable to an unauthenticated remote admin access bypass (CVE-2026-76504). Attackers are exploiting this actively in the wild. Patch immediately if you operate SD-WAN deployments. Cisco has released fixes. DETAILS Vulnerability: Improper authentication check in Cisco Catalyst SD-WAN Manager allows remote attackers to access the platform without valid credentials—bypassing authentication entirely to gain administrative privileges. Active Exploitation: Multiple security vendors confirm this zero-day is being exploited in active attacks. The vulnerability is no longer theoretical; threat actors have proof-of-concept working code. Affected Product: Cisco Catalyst SD-WAN Manager, the centralized management and orchestration platform for software-defined WAN (SD-WAN) deployments across enterprise networks. Patch Status: Cisco has released patches and issued a security advisory. Patches are available; deployment timeline unclear from public disclosures. Attack Surface: Network-accessible; no user interaction required. Any instance of SD-WAN Manager exposed to an attacker-controlled network is at immediate risk. IMPACT ...