CVE-2026-20245

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

June 8, 2026

Last Seen

September 30, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Authentication Bypass in Cisco Catalyst SD-WAN Manager Exploited80.3

On September 30, 2026, Cisco disclosed a critical vulnerability (CVE-2026-76504) in the Catalyst SD-WAN Manager that allows unauthenticated remote attackers to bypass authentication and gain admin-level access to the system. This flaw stems from improper handling of URI encoding in HTTP requests, en...

ShinyHunters Exploits Oracle PeopleSoft Zero-Day Vulnerability77.3

A critical zero-day vulnerability (CVE-2026-35273) in Oracle PeopleSoft has been exploited by the ShinyHunters group, leading to breaches of over 100 organizations, primarily in the education sector. The vulnerability allows unauthenticated remote code execution, enabling attackers to compromise sys...