Cisco SD-WAN Zero-Day Exploited Months Before Patching
Teaser from the source
CVE-2026-20245, the 7th Cisco SD-WAN vulnerability exploited in 2026, was used for months prior to its disclosure and patching. The post Cisco SD-WAN Zero-Day Exploited Months Before Patching appeared first on SecurityWeek .
This is the RSS-feed teaser. Read the full article at the original source.
Read at SecurityWeekAffected vendors and products
More on Zero-Day
Other advisories
- CriticalCVE-2026-76418Cisco ASA and FTD zero-day CVE-2026-76418 exploited to crash SSL VPN firewalls
- CriticalCVE-2026-114625Arista VeloCloud Orchestrator zero-day CVE-2026-114625 exploited in attacks
- CriticalCVE-2026-108398Windows Shell Mark-of-the-Web bypass zero-day (CVE-2026-96951)
- CriticalCVE-2026-111357Ivanti Connect Secure zero-day chain (CVE-2026-104935) exploited for root
- CriticalCVE-2026-104286FortiMail unauthenticated file-write zero-day CVE-2026-104286
- CriticalCVE-2026-86950Apple CoreGraphics zero-day CVE-2026-86950
- CriticalCVE-2026-88778Citrix NetScaler ADC and Gateway: two unauthenticated RCE zero-days under active exploitation (CVE-2026-88771, CVE-2026-88772)
- CriticalCVE-2026-87491Chrome zero-day CVE-2026-87491 (V8 OOB write)
Other news entries
- New Cisco firewall zero-day being actively exploitedNewsCSO Online
- New Cisco firewall zero-day exploited to crash SSL VPN devicesNewsBleepingComputer
- Cisco SD-WAN Zero-Day Exploitation Tied to Volt Typhoon’s ‘Silent Train’ NetworkNewsSecurityWeek
- Attackers Exploit Second Cisco Firewall VPN Zero-Day Since AugustNewsSecurityWeek
- Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-DayNewsSecurityWeek
- China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail VisibilityNewsThe Hacker News
- Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation CampaignsNewsThe Hacker News
- Volt Typhoon hides zero-day attacks using 'Silent Train' frameworkNewsBleepingComputer
Source: https://www.securityweek.com/cisco-sd-wan-zero-day-exploited-months-before-patching/
ID