{"uuid": "4f1eff5b-d0b3-4e63-909e-f980f601fd4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://t.me/pphm_HackerNews/1635", "content": "\ud83d\udd34 Cisco SD-WAN Zero-Day Exploited Months Before Patching\n\nThe vulnerability, tracked as CVE-2026-20245, is the 7th Cisco SD-WAN product flaw whose exploitation came to light in 2026. \n\nCVE-2026-20245 affects the CLI of Cisco Catalyst SD-WAN Manager and allows an authenticated local attacker to execute arbitrary commands with root privileges using specially crafted files.\n\nThe security hole was disclosed by Cisco in early June, and patches were released roughly one week later. \n\nMandiant\u2019s investigation began in early 2026 after observing an unidentified threat actor targeting SD-WAN infrastructure at a service provider.", "creation_timestamp": "2026-08-22T00:00:27.496636Z"}