Cisco warns of new SD-WAN zero-day exploited in attacks

Cisco released security updates to address a critical zero-day in the Catalyst SD-WAN Manager (tracked as CVE-2026-76504) that attackers are actively exploiting to escalate to admin privileges.

Read at the source

Summary written for cymesh.dev. The full article lives at BleepingComputer.

Referenced CVEs

CVE-2026-76504

Topics

zero-day cve

~/cymesh.net

This is what cymesh.net is for

Certificate and hostname problems are the ones you find out about from your users. cymesh.net finds them first.

monitorsTLS/SSL expiry, chain and hostnamealertsemail, ahead of the expiry datescopenon-intrusive, read-only checks

Open the console See cymesh.net

~/related/cisco-warns-of-new-sd-wan-zero-day-exploited-in-attacks-1enmcx

2026-10-02 17:02 UTC[high]

Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes

The Hacker NewsCVE-2026-63688cloud cve

2026-10-02 16:56 UTC[crit]

Kiteworks & Citrix Incidents Show Challenges of Zero-Day Response

Dark Readingzero-day patch

2026-10-02 12:00 UTC[med]

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA AdvisoriesCVE-2026-102489CVE-2026-102490cve cisa

2026-10-02 08:50 UTC[crit]

Critical FortiMail zero-day exploited in the wild (CVE-2026-104286)

Help Net SecurityCVE-2026-104286zero-day cve

2026-10-02 08:07 UTC[crit]

Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action

SecurityWeekCVE-2026-104286zero-day cve

2026-10-02 05:49 UTC[crit]

Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes

The Hacker NewsCVE-2026-104286zero-day cve cisa