Vulnerability Notification – Cisco SD-WAN Manager Actively Exploited

(TLP:CLEAR) A critical authentication bypass vulnerability affecting Cisco Catalyst SD-WAN Manager is being actively exploited in the wild. Tracked as CVE-2026-76504 (CVSS 9.8), the vulnerability is in the Manager’s API session-based authentication mechanism. Successful exploitation could allow a remote, unauthenticated attacker to access the API as the admin user. All deployments are affected regardless of configuration, and no workarounds exist…