CVE Tools
Track your stack

When Network Controllers Become "God Mode" for Attackers

Rapid7 BlogBy Rapid7

Reported exploitedCisco Catalyst SD-WAN ControllerUAT-8616
Read at Rapid7 Blog

Rapid7 Blog publishes this story on its own site; we link to it rather than reprint it.

  1. SecurityWeekCisco SD-WAN Zero-Day Exploited Months Before PatchingCVE-2026-20127, CVE-2026-20182
  2. The Hacker NewsCisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited to Gain Root AccessCVE-2026-20127, CVE-2026-20182
  3. BleepingComputerMandiant reveals how Cisco SD-WAN zero-day attacks gained root accessCVE-2026-20127, CVE-2026-20182
  4. Dark ReadingAttackers Hit Cisco SD-WAN Flaw 2 Months Before DisclosureCVE-2026-20127, CVE-2026-20182
  5. SecurityWeekCisco Patches Another SD-WAN Zero-Day Exploited in AttacksCVE-2026-20127, CVE-2026-20182
  6. The Hacker NewsCisco Releases Security Updates for Actively Exploited SD-WAN Manager FlawCVE-2026-20127, CVE-2026-20182
  7. The Hacker NewsCisco Catalyst SD-WAN Manager CVE-2026-20245 Flaw Actively Exploited – No Patch AvailableCVE-2026-20127, CVE-2026-20182
  8. BleepingComputerCisco warns of unpatched SD-WAN zero-day exploited in attacksCVE-2026-20127, CVE-2026-20182
  9. SecurityWeekCisco Warns of 7th SD-WAN Zero-Day Exploited in 2026CVE-2026-20127, CVE-2026-20182
  10. Cisco TalosOngoing exploitation of Cisco Catalyst SD-WAN vulnerabilitiesCVE-2026-20127, CVE-2026-20182

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store