Catalyst SD-WAN

Mentions · 7d2
Mentions · 30d2
All mentions3
First seenAug 21, 2026
Last mentioned3d ago

Timeline

3 articles · newest first

Volt Typhoon used Silent Train relays to hide zero-day attacks

Lumen links the relay network to four confirmed zero-days and one likely flaw, with sessions rebuilt in under two minutes.

Security Affairsupdated Oct 30, 00:10 UTC · 3d agofirst Oct 29, 10:34 UTC · 3d agoThreat actorExploited14 sourcesCVE-2025-8875 CVE-2025-8876 CVE-2026-20127+1

Volt Typhoon Exploits Zero-Days to Breach Critical Infrastructure

Volt Typhoon built Silent Train framework using zero-days in Quest KACE, N-central, Cisco SD-WAN and VeloCloud to access U.S. critical infrastructure.

GBHackersupdated Oct 30, 00:10 UTC · 3d agofirst Oct 29, 09:24 UTC · 3d agoExploit / PoCExploited14 sourcesCVE-2025-8875 CVE-2025-8876 CVE-2026-20127+11

Cisco Patches Nine Crosswork and Secure Workload Flaws, Five Scoring CVSS 10.0

Cisco patches nine Crosswork and Secure Workload flaws, five rated CVSS 10.0, found internally with no exploitation observed.

The Hacker NewsAug 21, 10:03 UTC · Aug 21, 2026VulnerabilityCVE-2026-20030 CVE-2026-20357 CVE-2026-20358+71 · 1 read

Related CVEs

by mentions

CVE-2026-2012789%10.0
Authentication Bypass in Cisco Catalyst SD-WAN Controller, Manager, Validator
published Feb 25, 2026Cisco Catalyst SD-WAN Controller (formerly SD-WAN vSmart)KEV
CVE-2026-168122%10.0
OS Command Injection in Arista VeloCloud Orchestrator On-Prem
published Jul 27, 2026Arista VeloCloud Orchestrator On-PremKEV
CVE-2025-88753%9.4
Insecure Deserialization Code Execution in N-able N-central (KEV)
published Aug 14, 2025N-able N-centralKEV
CVE-2025-88764%9.4
OS Command Injection in N-able N-central Before 2025.3.1
published Aug 14, 2025N-able N-centralKEV
CVE-2026-203491%8.6
Unauthenticated Remote DoS in Cisco ASA/FTD SSL VPN Service
published Aug 11, 2026Cisco Secure Firewall Adaptive Security Appliance (ASA) SoftwareKEVPoC
CVE-2026-20315<1%10.0
Unauthenticated Improper Access Control in Cisco Secure Workload
published Aug 19, 2026Cisco Secure Workload
CVE-2026-20030<1%10.0
Unauthenticated SQL Injection (CWE-89) in Cisco Crosswork
published Aug 19, 2026Cisco Crosswork
CVE-2026-20357<1%10.0
Missing Authentication for Critical Functions in Cisco Crosswork
published Aug 19, 2026Cisco Crosswork
CVE-2026-20231<1%9.9
Injection vulnerabilities (CWE-74) in Cisco Secure Workload
published Aug 19, 2026Cisco Secure Workload (formerly Tetration)
CVE-2026-20319<1%7.5
Buffer Management Flaws in Cisco Secure Workload Allow Remote Denial of Service
published Aug 19, 2026Cisco Secure Workload

Appears with

Ciscovendor · 3
N-ablevendor · 2
KACEproduct · 2
VeloCloud Orchestratorproduct · 2
N-centralproduct · 2
Volt Typhoonthreat actor · 2
Black Lotus Labsorganization · 2
Secure Firewall ASAproduct · 1
Crosswork Data Gatewayproduct · 1
Crosswork Network Controllerproduct · 1
Lumenorganization · 1
Chiselmalware · 1
Crosswork Planningproduct · 1
IOS XEproduct · 1
U.S. critical infrastructure organizationsvictim · 1
Quest Softwarevendor · 1

Entities are extracted by the model from each article. First seen Aug 21, 2026, last mentioned 3d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.