Cisco SD-WAN Catalyst Controller

Search everything

Mentions · 7d1
Mentions · 30d1
All mentions1
First seenOct 28, 2026
Last mentioned2d ago

Timeline

1 articles · newest first

UAT-11473 used Cisco SD-WAN auth bypass to plant KeyDrift

Talos says the implant lives in controller processes, steals data-plane keys, and overlaps Volt Typhoon infrastructure.

Cisco Talosupdated 00:10 UTC · 23h agofirst Oct 28, 21:32 UTC · 2d agoThreat actorExploited14 sourcesCVE-2026-201271

Related CVEs

by mentions

CVE-2026-2012789%10.0
Authentication Bypass in Cisco Catalyst SD-WAN Controller, Manager, Validator
published Feb 25, 2026Cisco Catalyst SD-WAN Controller (formerly SD-WAN vSmart)KEV

Appears with

KeyDriftmalware · 1
Volt Typhoonthreat actor · 1
PolyFlamemalware · 1
Ciscovendor · 1
Cisco Talosorganization · 1
UAT-11473threat actor · 1
LittleFilchmalware · 1

Entities are extracted by the model from each article. First seen Oct 28, 2026, last mentioned 2d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.