CVE-2026-76504 – Cisco Catalyst SD-WAN Manager
“One crafted request turns an anonymous stranger into the admin of your entire network fabric.”
Cisco has released a fix for a critical authentication bypass in Cisco Catalyst SD-WAN Manager. CVE-2026-76504 has a CVSS score of 9.8, Critical severity. The flaw stems from improper handling of URI encoding in HTTP requests, which lets a crafted request slip past an authentication rule meant to restrict access to a specific API endpoint. An unauthenticated, remote attacker can exploit it to reach the API with admin privileges.
Attackers are actively exploiting CVE-2026-76504. Because SD-WAN Manager centrally controls the network fabric, admin-level API access gives an attacker direct control over network configuration across the organization. Patch immediately.
Key Details
- Affected Product
- Cisco Catalyst Sd-wan Manager
- Attack Vector
- Network
- Attack Complexity
- Low
- Privileges Required
- None
- User Interaction
- None
- CWE Classification
- CWE-177