CISA Adds Exploited Cisco Catalyst SD-WAN Manager Flaw to KEV

· Cybersecurity · United States

CISA added a critical authentication bypass in Cisco Catalyst SD-WAN Manager (CVE-2026-76504, CVSS 9.8) to its Known Exploited Vulnerabilities catalog after reports of active exploitation. The flaw could allow attackers to bypass authentication on a widely deployed enterprise networking management platform.

Why it matters：Government-mandated remediation deadlines force enterprises worldwide to patch critical network infrastructure, making this a test of how quickly the industry responds to actively exploited edge-device flaws.

Key points

  • Vulnerability tracked as CVE-2026-76504 with a CVSS score of 9.8.
  • CISA cited reports of active exploitation when adding it to the KEV catalog.
  • The flaw is an authentication bypass affecting Cisco Catalyst SD-WAN Manager.

Sources (original reporting)

More stories from this day