Critical 9.8
CVE-2026-76504
Cisco Catalyst SD-WAN Manager Zero-Day Exploitation (CVE-2026-76504)
Vendor / product: Cisco Catalyst SD-WAN Manager
Event date: 2026-09-30
Public PoC: Yes
First tracked by RiskWire: 2026-09-23
Sources & citations (108)
- Arista patches actively exploited VeloCloud Orchestrator zero-day bleepingcomputer.com · 2026-09-23
- Arista VeloCloud Flaw Hits CVSS 10.0: Patch Now sqmagazine.co.uk · 2026-09-23
- Arista VeloCloud Orchestrator CVE-2026-93952: Active Exploitation of Authentication Bypass Zero-Day dev.to · 2026-09-24
- Arista VeloCloud Orchestrator: CVE-2026-93952 aktiv security-insider.de · 2026-09-30
- New Cisco SD-WAN zero-day exploited in-the-wild (CVE-2026-76504) helpnetsecurity.com · 2026-10-01
- CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV thehackernews.com · 2026-10-01
- Cisco Patches a Critical SD-WAN Zero-Day Already Exploited in the Wild + Video undercodenews.com · 2026-10-01
- Cisco Catalyst SD-WAN Manager: Κρίσιμη ευπάθεια στον Κατάλογο KEV secnews.gr · 2026-10-01
- Cisco Catalyst SD-WAN Managerの認証回避 脆弱性:CVE-2026-76504がサイバー攻撃に悪用、CVSS 9.8・CISA KEVに追加 rocket-boys.co.jp · 2026-10-01
- Critical Cisco Catalyst SD-WAN Zero-Day Under Active Exploitation infosecurity-magazine.com · 2026-10-01
- Critical Cisco SD-WAN Flaw Added to CISA KEV After Active Exploitation + Video undercodenews.com · 2026-10-01
- Firma Cisco wydała aktualizacje w celu usunięcia krytycznej luki typu 0-day w Catalyst SD-WAN Manager (oznaczonej jako CVE-2026-76504), którą cyberprzestępcy aktywnie wykorzystują do podniesienia swoich uprawnień do poziomu a.. poland.news-pravda.com · 2026-10-01
- CVE-2026-76504: Cisco SD-WAN Authentication Bypass socprime.com · 2026-10-01
- Cisco SD-WAN Manager Zero-Day CVE-2026-76504 Exploited for Admin Access op-c.net · 2026-10-01
- 🔒 CISA nimmt Auth-Bypass in Cisco SD-WAN Manager in die KEV-Liste tsecurity.de · 2026-10-01
- Cisco Catalyst SD-WAN Manager flaw added to CISA's exploit list scworld.com · 2026-10-01
- U.S. CISA adds Cisco Catalyst SD-WAN Manager flaw to its Known Exploited Vulnerabilities catalog ground.news · 2026-10-01
- 🔒 CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV tsecurity.de · 2026-10-01
- Cisco Patches Exploited Catalyst SD-WAN Zero-Day Vulnerability hendryadrian.com · 2026-10-01
- U.S. CISA adds Cisco Catalyst SD-WAN Manager flaw to its Known Exploited Vulnerabilities catalog itsecuritynews.info · 2026-10-01
+88 more sources
References
See CVE-2026-76504 in context
RiskWire tracks every exploited CVE this week, cross-referenced against CISA KEV with federal remediation deadlines. Filtered to your vendor stack.
Book a 20-min demo →