Cisco Patches Actively Exploited Zero-Day in Catalyst SD-WAN Manager

Cisco has released security updates to address a critical zero-day vulnerability, tracked as CVE-2026-76504, in its Catalyst SD-WAN Manager platform. According to reporting from BleepingComputer, attackers are actively exploiting this flaw in the wild. The vulnerability permits authentication bypass, allowing threat actors to escalate their privileges to the admin level. Successful exploitation could lead to complete compromise of the SD-WAN management infrastructure, enabling traffic manipulation, lateral movement into connected networks, and unauthorized configuration changes. Cisco has not disclosed detailed technical specifications of the exploit method, but confirmed that the vulnerability is being actively targeted. Security updates have been released; users are strongly advised to apply the latest firmware and software updates for Catalyst SD-WAN Manager immediately to mitigate the risk.