Cisco Catalyst SD-WAN Controller Auth Bypass Actively Exploited to Gain Admin Access

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-05-14 17:45 UTC
  • Importiert: 2026-05-23 09:37 UTC
  • CVSS: 10.0
  • Quelle-ID: thn_global
  • uid_hash: ebae2f1808435f1da0e3d2843e760fc25977ce4587648720adfffdbee54c1ca1

Inhalt

Cisco has released updates to address a maximum-severity authentication bypass flaw in Catalyst SD-WAN Controller that it said has been exploited in limited attacks. The vulnerability, tracked as CVE-2026-20182, carries a CVSS score of 10.0. "A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, and Cisco Catalyst SD-WAN Manager, formerly

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-20182

CRITICAL

10

CRITICAL

10

2026-05-14

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

security_news - de https://feeds.feedburner.com/TheHackersNews