CVE-2026-20182

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

May 14, 2026

Last Seen

October 29, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Zero-Day Vulnerability CVE-2026-20182 Exploited in Cisco SD-WAN Systems87.2

Cisco has disclosed a critical authentication bypass vulnerability, CVE-2026-20182, affecting its Catalyst SD-WAN Controller and Manager. This flaw allows unauthenticated remote attackers to bypass authentication and gain administrative privileges, enabling manipulation of network configurations. Th...

KeyDrift Malware Exploits Cisco SD-WAN Flaw CVE-2026-2012780.7

Cisco Talos reported that the advanced persistent threat group UAT-11473 exploited a critical authentication bypass vulnerability (CVE-2026-20127) in Cisco SD-WAN Catalyst Controllers. This flaw, which has a CVSS score of 10.0, allows unauthorized remote access to administrative privileges. The grou...

Critical Authentication Bypass in Cisco Catalyst SD-WAN Manager Exploited80.3

On September 30, 2026, Cisco disclosed a critical vulnerability (CVE-2026-76504) in the Catalyst SD-WAN Manager that allows unauthenticated remote attackers to bypass authentication and gain admin-level access to the system. This flaw stems from improper handling of URI encoding in HTTP requests, en...

Cisco Advises on Critical Vulnerability CVE-2026-20182 with Active Exploitation72.9

On May 14, 2026, Cisco released a security advisory addressing critical vulnerabilities, specifically CVE-2026-20182, which has been confirmed to have limited exploitation. The Cybersecurity and Infrastructure Security Agency (CISA) added this CVE to their Known Exploited Vulnerabilities (KEV) Datab...