{"uuid": "2c14cf7f-9cd6-4a46-b877-f4df07606e73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/117361427861570548", "content": "\ud83d\udea8 Cisco warns critical SD-WAN Manager zero-day is actively exploited\nCVE-2026-76504 is a critical authentication bypass affecting Cisco Catalyst SD-WAN Manager.\nThe flaw allows an unauthenticated remote attacker to send a crafted HTTP request that bypasses an API authentication rule and grants access with admin privileges.\u2800The vulnerability carries a CVSS score of 9.8 and affects the product regardless of its configuration.\nCisco became aware of active exploitation in September after investigating a support case.\u2800There are no workarounds. Administrators should install a fixed release immediately and investigate internet-facing systems for signs of compromise.\nSource: https://www.bleepingcomputer.com/news/security/cisco-warns-of-new-sd-wan-authentication-bypass-zero-day-exploited-in-attacks/", "creation_timestamp": "2026-09-30T18:34:32.611098Z"}