CVE-2026-2024

CVE-2026-20245, the 7th Cisco SD-WAN vulnerability exploited in 2026, was used for months prior to its disclosure and patching. The post Cisco SD-WAN Zero-Day Exploited Months Before Patching appeared first on SecurityWeek. [xlite_meta score:56 src:SecurityWeek xlite_fp:3d5c8384c0c79b2a1519d217c2b0b8f8a3e5af8e958d32f157f5d8710f68f87e]

An unknown threat actor exploited a recently disclosed high-severity security flaw impacting Cisco Catalyst SD-WAN as a zero-day at least two months before it was publicly disclosed, according to new findings from Google-owned Mandiant. The vulnerability, tracked as CVE-2026-20245 (CVSS score: 7.8), allows an authenticated, local attacker to execute arbitrary commands with elevated privileges [xlite_meta score:59 src:The Hacker News xlite_fp:c28bb77e75cbcbb9b918b8a3281fe12aed225ec6118fff7d89666f66dbf4b6cd]

New details have been revealed on how hackers exploited a Cisco Catalyst SD-WAN vulnerability tracked as CVE-2026-20245 in zero-day attacks to create rogue root accounts on targeted devices. [...] [xlite_meta score:64 src:BleepingComputer xlite_fp:78e1399d37c4e0d5df662b87d9a3cc1b241c705c0990d0c295efc94b6fb3cab2]

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation. The list of vulnerabilities is as follows - CVE-2026-20245 (CVSS score: 7.8) - An improper encoding or escaping of output vulnerability in Cisco Catalyst SD-WAN Manager that could allow an [xlite_meta score:50 src:The Hacker News xlite_fp:491673730d27fc0b815e1af470041a551100619c902fac72381a9b1cb163f959]

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-7473 Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability CVE-2026-11645 Google Chromium V8 Out-of-Bounds Read and Write Vulnerability CVE-2026-20245 Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise. Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures ( [xlite_meta score:54 src:CISA Alerts xlite_fp:f5c925405934f523e4a00a031732375aef6b8c3a722c3a629bc6338d0c644fc3]

Cisco has warned that a high-severity security flaw impacting Catalyst SD-WAN Manager has come under active exploitation. The vulnerability, tracked as CVE-2026-20245, carries a CVSS score of 7.8 out of a maximum of 10.0. It affects the following deployment types - On-Prem Deployment Cisco SD-WAN Cloud-Pro Cisco SD-WAN Cloud (Cisco Managed) Cisco SD-WAN for Government (FedRAMP) "A [xlite_meta score:59 src:The Hacker News xlite_fp:9d942a78fbc6f0d9500a316a8d2315c9b5394fb74b742dba3858c33aaa7072ad]

On Thursday, Cisco warned of a high-severity, unpatched zero-day in the Cisco Catalyst SD-WAN Manager (tracked as CVE-2026-20245) actively exploited in attacks enabling root privilege escalation. [...] [xlite_meta score:70 src:BleepingComputer xlite_fp:71a3c560d80fceaf03c75b1e3e10593aa8e9de15e8b76c24d8fce40b1c7b7fe3]

The vulnerability is tracked as CVE-2026-20245 and it can allow arbitrary command execution as root, but no patch yet. The post Cisco Warns of 7th SD-WAN Zero-Day Exploited in 2026 appeared first on SecurityWeek. [xlite_meta score:56 src:SecurityWeek xlite_fp:985bf584b32547a621ae2a802f181a579debc6f0ed48badbadb6b9b18d3b617f]