EP. 171: Cisco SD-WAN Zero-Day CVE-2026-76504 Exploited for Admin Access

The Digital Warfare Podcast · Oct 1, 2026 · 4m · transcript

Summary

A critical vulnerability tracked as CVE-2026-76504 affects Cisco Catalyst SD-WAN Manager and is being actively exploited.

The vulnerability has a CVSS score of 9.8 and originates from improper handling of URI encoding in HTTP requests. Crafted requests can bypass an authentication rule protecting an API endpoint, allowing an unauthenticated remote attacker to access the API with administrator privileges.

The vulnerability affects Catalyst SD-WAN Manager regardless of configuration, and there is no workaround. Organizations running affected versions should preserve diagnostic evidence…