Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager

Cisco warned on September 30 that attackers are exploiting a critical flaw in Cisco Catalyst SD-WAN Manager, CVE-2026-76504, which could allow a remote attacker with no login access to use the Manager's API as the admin user. Fixed releases are available, and there is no workaround. The vulnerability affects systems companies use to manage their Cisco SD-WAN networks.