Cisco Announces Max-Severity SD-WAN Flaw, Record Revenue, and Layoffs
NEOSEC enrichment — no mirror of the original source
Cisco urges users to apply patches for a maximum-severity vulnerability in the Cisco Catalyst SD-WAN Controller (formerly vSmart), that is under active exploitation. CVE-2026-20182, CVSS score 10.0, allows an unauthenticated remote attacker
Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at SANS NewsBitesLinked advisories
- CVE-2026-20182May 2026: This security advisory provides the details and fix information for a vulnerability that was discovered and fixed after the was disclosed in Febru…
- CVE-2026-20127Cisco Catalyst SD-WAN Controller and Manager — Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability
- CVE-2026-20182Cisco Catalyst SD-WAN — Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
Affected vendors and products
More on Max-Severity
Other advisories
Other news entries
- Max-Severity GitLab Vulnerability Exploited Against Alpine LinuxNewsSecurityWeek
- HPE Patches Dozens of Critical Flaws in Networking ProductsNewsSecurityWeek
- Max-severity GitLab bug allows remote code execution over 12 years of releasesNewsThe Register — Security
- GitLab patches a max-severity regex flaw alongside five high-severity bugsNewsCSO Online
- Kiteworks patches max severity code injection vulnerabilityNewsBleepingComputer
- Cisco patches max-severity ISE flaw, the second critical zero-day this weekNewsCSO Online
- Adobe fixes critical Magento zero-day exploited to backdoor serversNewsBleepingComputer
- Adobe Commerce max-severity bug comes under active attackNewsCSO Online
Source: https://sec.cloudapps.cisco.com/
ID