Skip to content

CVE-2026-76504

CVE

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
September 30, 2026
Last Seen
September 30, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Cisco has disclosed a critical zero-day vulnerability (CVE-2026-76504) in the Catalyst SD-WAN Manager, which is actively being exploited by attackers to gain admin privileges. This flaw, due to improper URI encoding handling in API session-based authentication, allows unauthenticated remote access t...

Public Exploits

Checking GitHub for proof-of-concept code…