/
cves:CVE-2026-76504 × limpar

Resultados

2 casos · pág. 1/1

cisa.gov · high

CISA adds Cisco Catalyst SD-WAN Manager CVE-2026-76504 hex encoding flaw to KEV catalog over active exploitation

CISA added one vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog on 2026-09-30, citing evidence of active exploitation: CVE-2026-76504, a hex encoding vulnerability in Cisco Catalyst SD-WAN Manager. CISA describes this vulnerability type as a frequent attack vector for malicious cyber actors and a significant risk to the …

CVE-2026-76504 government
sec.cloudapps.cisco.com · critical

Cisco Catalyst SD-WAN Manager API authentication bypass (CVE-2026-76504) gives unauthenticated attackers admin access

Cisco disclosed a critical authentication bypass, CVE-2026-76504, in the API session-based authentication management of Cisco Catalyst SD-WAN Manager. An unauthenticated, remote attacker can send a crafted HTTP request and gain access to the API with the privileges of the admin user. Cisco has released software updates and states that no …

CVE-2026-76504