Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability Under Active Exploitation (sec.cloudapps.cisco.com)

• CVE-2026-20182 authentication bypass in Cisco Catalyst SD-WAN
• Remote attackers can gain full administrative control
• Active exploitation reported; immediate patching required

"A critical authentication bypass vulnerability (CVE-2026-20182) in Cisco Catalyst SD-WAN infrastructure is being actively exploited by remote attackers. The flaw allows unauthorized administrative control over network fabrics, potentially compromising enterprise and service provider networks. Cisco has released security advisories urging immediate patching. The vulnerability affects multiple SD-WAN controller versions. Organizations are advised to apply updates and monitor for signs of compromise."