01 October 2026
Reference: CVE-2026-76504
1. What is being reported?
The vulnerability involves a weakness in how the Cisco Catalyst SD-WAN Manager handles certain web requests. Attackers can send specially crafted requests that bypass the usual login checks and gain full admin access to the system's API.
2. What this means in plain English
If exploited, someone outside your organisation could control your SD-WAN Manager, potentially changing settings or accessing sensitive network information. This could disrupt your internet connections or expose your data to attackers.
3. Could this affect a small business?
This mainly affects organisations using Cisco Catalyst SD-WAN Manager. If your business or charity uses this product, you could be at risk. If you do not use this software, this vulnerability does not affect you.
4. What to do now
- Check if your organisation uses Cisco Catalyst SD-WAN Manager.
- Contact your IT provider or Cisco support to confirm if you are running a vulnerable version.
- Apply any security updates or mitigations recommended by Cisco immediately.
- If updates are not available, consider discontinuing use or isolating the affected system from the internet.
5. Ask your IT provider
Can you confirm whether our Cisco Catalyst SD-WAN Manager is affected by CVE-2026-76504 and what steps are being taken to protect us from this critical vulnerability?
6. Bottom line
If you use Cisco Catalyst SD-WAN Manager, act now to secure it against a critical flaw that is already being exploited.
Information based on CISA KEV, NVD, and multiple reputable security news reports.