Cisco SD-WAN Zero-Day Exploited Months Before Patching
Teaser from the source
CVE-2026-20245, the 7th Cisco SD-WAN vulnerability exploited in 2026, was used for months prior to its disclosure and patching. The post Cisco SD-WAN Zero-Day Exploited Months Before Patching appeared first on SecurityWeek .
This is the RSS-feed teaser. Read the full article at the original source.
Read at SecurityWeekAffected vendors and products
More on Zero-Day
Other advisories
- CriticalCVE-2026-76418Cisco ASA and FTD zero-day CVE-2026-76418 exploited to crash SSL VPN firewalls
- CriticalCVE-2026-114625Arista VeloCloud Orchestrator zero-day CVE-2026-114625 exploited in attacks
- CriticalCVE-2026-108398Windows Shell Mark-of-the-Web bypass zero-day (CVE-2026-96951)
- CriticalCVE-2026-111357Ivanti Connect Secure zero-day chain (CVE-2026-104935) exploited for root
- CriticalCVE-2026-104286FortiMail unauthenticated file-write zero-day CVE-2026-104286
- CriticalCVE-2026-86950Apple CoreGraphics zero-day CVE-2026-86950
- CriticalCVE-2026-88778Citrix NetScaler ADC and Gateway: two unauthenticated RCE zero-days under active exploitation (CVE-2026-88771, CVE-2026-88772)
- CriticalCVE-2026-87491Chrome zero-day CVE-2026-87491 (V8 OOB write)
Other news entries
- Ivanti patches two more Connect Secure zero-days chained in attacksNewsBleepingComputer
- Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack ChainNewsSecurityWeek
- Attacken auf Lücken in Drupal, Ivanti Connect Secure und Synology laufenNewsheise Security
- New Cisco firewall zero-day being actively exploitedNewsCSO Online
- New Cisco firewall zero-day exploited to crash SSL VPN devicesNewsBleepingComputer
- Cisco SD-WAN Zero-Day Exploitation Tied to Volt Typhoon’s ‘Silent Train’ NetworkNewsSecurityWeek
- Attackers Exploit Second Cisco Firewall VPN Zero-Day Since AugustNewsSecurityWeek
- Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-DayNewsSecurityWeek
Source: https://www.securityweek.com/cisco-sd-wan-zero-day-exploited-months-before-patching/
ID