Cisco Alerts on Exploitation of Major Authentication Vulnerability in SD-WAN Manager

Cisco has raised alarms about a significant security vulnerability affecting its Catalyst SD-WAN Manager, which is crucial for managing Cisco's SD-WAN networks. This vulnerability, identified as CVE-2026-76504, enables remote attackers to bypass authentication and gain access to the Manager's API with administrative privileges, even without valid login credentials. The company has confirmed that there are no workarounds available for this issue, but patches have been released to address the flaw. Organizations utilizing the SD-WAN Manager are urged to apply these updates promptly to safeguard their systems from potential exploitation. The advisory emphasizes the critical nature of this vulnerability and the importance of immediate action to mitigate risks associated with unauthorized access.