Exploit / PoCcritical

Cisco Catalyst SD-WAN Zero-Day CVE-2026

The Hacker Newsby @TheHackersNewsJun 25, 2026 · 05:46 UTC (Jun 25, 2026)3 min read4 · 2 reads

Read at thehackernews.com

Analyze CVE-2026-20245 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2026-20245 CVE-2026-20127 CVE-2026-20182

Tags: cve-2026-20127 cve-2026-20182 cve-2026-20245 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2026-20127	Authentication Bypass in Cisco Catalyst SD-WAN Controller, Manager, Validator	10.0	89%	KEV	Feb 25, 2026 KEV Feb 25, 2026
CVE-2026-20182	Authentication Bypass in Cisco Catalyst SD-WAN Control Components	10.0	92%	KEV	May 14, 2026 KEV May 14, 2026
CVE-2026-20245	Command Injection as Root in Cisco Catalyst SD-WAN Manager	7.8	25%	KEV	Jun 4, 2026 KEV Jun 9, 2026

From the original article

3 min read at thehackernews.com

 Ravie Lakshmanan  Jun 25, 2026 Vulnerability / Threat Intelligence An unknown threat actor exploited a recently disclosed high-severity security flaw impacting Cisco Catalyst SD-WAN as a zero-day at least two months before it was publicly disclosed, according to new findings from Google-owned Mandiant. The vulnerability, tracked as CVE-2026-20245 (CVSS score: 7.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.