Cisco Warns of Unpatched Zero-Day Vulnerability in SD-WAN

Cisco has published a security bulletin warning about a critical vulnerability in its Catalyst SD-WAN Manager software. The bug, identified as CVE-2026-20245, enables attackers to gain root access to vulnerable systems. As of now, no patches are available, but Cisco has confirmed instances of the vulnerability being exploited in active attacks.

The vulnerability affects SD-WAN network management components, widely used by large enterprises to optimize and secure corporate traffic. Experts note that successful exploitation could lead to complete infrastructure compromise, including access to sensitive data and the deployment of malware.

As a temporary security measure, Cisco recommends restricting access to the SD-WAN Manager interface to trusted IP addresses only and enhancing network activity monitoring. The company also stated that it is working on a patch, though no exact release timeline has been provided. Users are strongly advised to monitor updates and apply them immediately upon release.