Hackers Exploit Critical Cisco SD-WAN Flaw to Gain Admin Access Without Authentication

Cisco has warned that attackers are actively exploiting a critical authentication-bypass vulnerability in Cisco Catalyst SD-WAN Manager that can allow unauthenticated remote attackers to access affected systems with administrator-level privileges. Tracked as CVE-2026-76504, the flaw carries a CVSS severity score of 9.8 out of 10 and affects Cisco Catalyst SD-WAN Manager deployments regardless of system configuration. Cisco published advisory cisco-sa-sdwan-webauth-xr8beuuU on…