CYBERSECURITYTRACKER
Permanent story citation

Cisco warns of new SD-WAN zero-day exploited in attacks

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 8996

As cited

Copy frozen at (site build).

vulnerabilities

Cisco warns of new SD-WAN zero-day exploited in attacks

Cisco released security updates for a critical zero-day vulnerability in Catalyst SD-WAN Manager tracked as CVE-2026-76504. Attackers are actively exploiting the flaw to escalate privileges to administrator level.

Why it matters: SD-WAN administrators running Catalyst SD-WAN Manager must patch immediately to prevent active exploitation and privilege escalation that would give attackers full control of the SD-WAN environment.

VendorsCisco
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

vulnerabilities

Cisco warns of new SD-WAN zero-day exploited in attacks

Cisco released security updates for a critical zero-day vulnerability in Catalyst SD-WAN Manager tracked as CVE-2026-76504 (CVSS 9.8). Attackers are actively exploiting the flaw to escalate to administrator privileges.

Why it matters: Organizations running Cisco Catalyst SD-WAN Manager must patch immediately, as active exploitation of this critical vulnerability is underway and allows privilege escalation.

VendorsCisco
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

vulnerabilities

Cisco warns of new SD-WAN zero-day exploited in attacks

Cisco released a patch for CVE-2026-76504, a critical zero-day vulnerability in Catalyst SD-WAN Manager that allows attackers to escalate to administrative privileges. The flaw is being actively exploited in the wild.

Why it matters: Organizations running Catalyst SD-WAN Manager must apply the patch immediately, as the vulnerability (CVSS 9.8) is listed on the Known Exploited Vulnerabilities (KEV) catalog and under active attack.

VendorsCisco
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

vulnerabilities

Cisco warns of new SD-WAN zero-day exploited in attacks

Cisco released a patch for CVE-2026-76504, a critical zero-day vulnerability in Catalyst SD-WAN Manager that allows attackers to escalate to administrative privileges. The flaw is being actively exploited in the wild.

Why it matters: Organizations running Catalyst SD-WAN Manager must apply the patch immediately, as the vulnerability (CVSS 9.8) is listed on the Known Exploited Vulnerabilities (KEV) catalog and under active attack.

VendorsCisco
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

vulnerabilities

Cisco warns of new SD-WAN zero-day exploited in attacks

Cisco released a patch for CVE-2026-76504, a critical zero-day vulnerability in Catalyst SD-WAN Manager that allows attackers to escalate to administrative privileges. The flaw is being actively exploited in the wild.

Why it matters: Organizations running Catalyst SD-WAN Manager must apply the patch immediately, as the vulnerability (CVSS 9.8) is listed on the Known Exploited Vulnerabilities (KEV) catalog and under active attack.

VendorsCisco
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

vulnerabilities

Cisco warns of new SD-WAN zero-day exploited in attacks

Cisco released a patch for CVE-2026-76504, a critical zero-day vulnerability in Catalyst SD-WAN Manager that allows attackers to escalate to administrative privileges. The flaw is being actively exploited in the wild.

Why it matters: Organizations running Catalyst SD-WAN Manager must apply the patch immediately, as the vulnerability (CVSS 9.8) is listed on the Known Exploited Vulnerabilities (KEV) catalog and under active attack.

VendorsCisco
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary