Cisco SD-WAN Manager Zero-Day (CVE-2026-20245) Actively Exploited, No Patch Yet
Cisco warned that CVE-2026-20245, a high‑severity (CVSS 7.8) flaw in Catalyst SD‑WAN Manager allowing authenticated local attackers to run arbitrary commands as root, is being actively exploited in the wild. No patches or mitigations are currently available, and users must rely on prior fixes and monitor for IoCs.