CVE Tools
Track your stack

Cisco патчит уязвимость нулевого дня в SD-WAN

Хакер (xakep.ru)By Мария Нефёдова

Reported exploitedCisco Catalyst SD-WAN ManagerSD-WAN vManage

Our summary

Cisco has released patches for the zero-day vulnerability CVE-2026-20262 in Catalyst SD-WAN Manager (formerly SD-WAN vManage). The issue has been observed in real-world attacks, where it could be leveraged to escalate privileges to root by sending a crafted HTTP request that allowed creation or overwriting of arbitrary files via a vulnerable API. This matters for organizations managing SD-WAN centrally—CISA has added CVE-2026-20262 to its known exploited vulnerabilities catalog and directed federal agencies to remediate by 29 June 2026.

Read at Хакер (xakep.ru)

Хакер (xakep.ru) publishes this story on its own site; we link to it rather than reprint it.

  1. SecurityWeekCisco Patches Another SD-WAN Zero-Day Exploited in AttacksCVE-2026-20245, CVE-2026-20262
  2. The Hacker NewsCisco Releases Security Updates for Actively Exploited SD-WAN Manager FlawCVE-2026-20245, CVE-2026-20262
  3. BleepingComputerCisco fixes SD-WAN vManage flaw exploited in zero-day attacksCVE-2026-20245, CVE-2026-20262
  4. Check Point Research29th June – Threat Intelligence ReportCVE-2026-20245
  5. Daily CyberSecurity (securityonline.info)Cisco SD-WAN Zero-Day Exploited in AttacksCVE-2026-20245
  6. SecurityWeekCisco SD-WAN Zero-Day Exploited Months Before PatchingCVE-2026-20245
  7. The Hacker NewsCisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited to Gain Root AccessCVE-2026-20245
  8. BleepingComputerMandiant reveals how Cisco SD-WAN zero-day attacks gained root accessCVE-2026-20245
  9. Dark ReadingAttackers Hit Cisco SD-WAN Flaw 2 Months Before DisclosureCVE-2026-20245
  10. The Hacker NewsCisco Unified CM Flaw Exploited After PoC Reveals File-Write Path to RootCVE-2026-20262

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store