Cisco Catalyst SD-WAN Manager: Schwachstelle ermöglicht Erlangen von Administratorrechten
NEOSEC enrichment — no mirror of the original source
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Cisco Catalyst SD-WAN Manager ausnutzen, um die Authentifizierung zu umgehen und Administratorrechte zu erlangen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Criticalbsi:WID-SEC-2026-36811 linked CVE
Open advisory with all CVEs
More on Catalyst
Other advisories
- Not ratedCVE-2026-74846Catalyst-Plugin-Authentication: beobachtbare Zeitabweichung (Seitenkanal)
- Not ratedCVE-2026-74846Catalyst-Plugin-Authentication: beobachtbare Zeitabweichung (Seitenkanal)
- Not ratedosv:CVE-2026-74846Catalyst::Plugin::Authentication versions before 0.10029 for Perl allow timing attacks on stored passwords via eq comparisons in the legacy password verifier
- CriticalCVE-2026-20127KeyDrift malware steals SD-WAN encryption keys from Cisco Catalyst SD-WAN controllers hacked through CVE-2026-20127
- CriticalCVE-2026-76504Active Exploitation of Vulnerability in Cisco Catalyst SD-WAN Manager
- CriticalCVE-2026-76504Cisco Catalyst SD-WAN Manager: Schwachstelle ermöglicht Erlangen von Administratorrechten
- CriticalCVE-2026-76504CVE-2026-76504 affecting Cisco Catalyst SD-WAN Manager
- CriticalCVE-2026-76504Eine Schwachstelle in der API-sitzungsbasierten Authentifizierungsverwaltung von Cisco Catalyst SD-WAN Manager könnte es einem nicht authent...
Other news entries
- Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malwareNewsBleepingComputer
- Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption KeysNewsThe Hacker News
- Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityNewsCisco PSIRT
- Inside KeyDrift: Analyzing historical UAT-11473 activity on Cisco SD-WANNewsCisco Talos
- Cisco Catalyst SD-WAN Manager API Authentication Bypass VulnerabilityNewsCisco PSIRT
- Cisco SD-WAN Manager hit by zero-day admin access attackNewsCSO Online
- CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEVNewsThe Hacker News
- Cisco Patches Exploited Catalyst SD-WAN Zero-Day VulnerabilityNewsSecurityWeek
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3681
ID