sign in--:--:--UTC

CVE-2026-76504

exploited in the wild☆ pin

CVSS

9.8

Reports

9

First seen

Sep 30, 2026

Last seen

Oct 14, 2026

Affected product

Cisco Catalyst SD-WAN Manager

Associated actors

Star Blizzard ×1 Storm-3168 ×1 TA419 ×1 UAT-11587 ×1 Warlock ×1

Recent reports

Cisco Catalyst SD-WAN Manager Authentication Bypass Vulnerability (CVE-2026-76504)

NICS TaiwanOct 14, 2026 High

Weekly Threat Intelligence Report – 5 October

Check Point ResearchOct 5, 2026 High

High Threat Security Alert: Elevation of Privilege Vulnerability in Cisco Catalyst SD-WAN Manager (CVE-2026-76504)

GovCERT.HKOct 5, 2026 Critical

Critical FortiMail Zero-Day Exploited in Attacks Enables Unauthenticated File Writes

The Hacker NewsOct 2, 2026 High

Cisco Catalyst SD-WAN Manager Vulnerability Added to CISA KEV Database

Canadian Centre AlertsOct 1, 2026 Critical

CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV

The Hacker NewsOct 1, 2026 Critical

Cisco Warns of Critical Authentication Bypass in SD-WAN Manager Under Active Exploit

The Hacker NewsSep 30, 2026 Critical

Cisco warns of critical SD-WAN zero-day exploited in active attacks

Bleeping ComputerSep 30, 2026 High

CISA Adds CVE-2026-76504 Cisco Catalyst SD-WAN Manager Vulnerability to KEV Catalog

CISA AdvisoriesSep 30, 2026

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans