CVE-2025-2749

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

April 21, 2026

Last Seen

April 21, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

CISA Warns of Active Exploitation of Cisco Catalyst SD-WAN Vulnerabilities72.2

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert regarding the active exploitation of three vulnerabilities in Cisco's Catalyst SD-WAN Manager, specifically CVE-2026-20122, CVE-2026-20128, and CVE-2026-20133. These vulnerabilities were added to CISA's Known...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

CISA Warns of Active Exploitation of Cisco Catalyst SD-WAN Vulnerabilities

Apr 21·12 sources

Related Entities

Cisco CVE-2026-20122 CVE-2026-20128 CVE-2026-20133 CWE-200 - Exposure of Sensitive Information CWE-22 - Path Traversal CWE-287 - Improper Authentication CWE-79 - Cross-site Scripting (xss)T1567 - Exfiltration Over Web Service ActiveMQ Broker Apache ActiveMQ Catalyst Sd-wan Manager

CVE-2025-2749

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Public Exploits

CVE Details

Related Clusters (1)

CISA Warns of Active Exploitation of Cisco Catalyst SD-WAN Vulnerabilities

Related Articles (1)

Attacks on Cisco SD-WAN, Zimbra, TeamCity, PaperCut and more observed

Related Entities