Frequency
2
occurrences
First Seen
February 26, 2026
Last Seen
May 15, 2026
Related Threat Clusters
-
Critical Zero-Day Vulnerability CVE-2026-20182 Exploited in Cisco SD-WAN Systems
Cisco has disclosed a critical authentication bypass vulnerability, CVE-2026-20182, affecting its Catalyst SD-WAN Controller and Manager. This flaw allows unauthenticated remote attackers to bypass authentication and…
131 articles · Updated May 14, 2026 -
Cisco SD-WAN Zero-Day Exploited by Threat Actor Since 2023
A cyber threat actor has been exploiting a zero-day vulnerability (CVE-2026-20127) in Cisco Catalyst SD-WAN Controller since 2023. This vulnerability allows unauthenticated remote attackers to bypass authentication and…
104 articles · Updated February 25, 2026
Recent Intelligence Reports
- CC-4784 - Exploitation of Zero-Day Vulnerability in Cisco Catalyst SD — Digital.Nhs.Uk · May 15, 2026
- CC-4748 - Exploitation of Zero-Day Vulnerability in Cisco Catalyst SD — Digital.Nhs.Uk · February 26, 2026
Related Entities
Zero-day Exploit
England
CVE-2025-20127
CVE-2026-20127
CVE-2026-20182
Cwe-611 - Improper Restriction Of XML External Entity Reference (xxe)
T1021 - Remote Services
T1068 - Exploitation for Privilege Escalation
T1190 - Exploit Public-Facing Application
Cisco Catalyst Sd-wan
Cisco Catalyst Sd-wan Controller
Cisco Catalyst Sd-wan Manager