Vulnerabilities & Exploits2 October 2026
CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV
CISA has confirmed active exploitation of a critical authentication bypass in Cisco Catalyst SD-WAN Manager, tracked as CVE-2026-76504. Federal agencies had until 3 October 2026 to remediate. Every other operator should treat the flaw as urgent too.
ciscosd-wancisa-kev
3 min readRead
Vulnerability Management17 September 2026
Cisco ISE Zero-Day (CVE-2026-76460, CVSS 10.0) Actively Exploited — No Workaround
A maximum-severity authentication bypass in Cisco Identity Services Engine is being exploited in the wild, with no interim mitigation beyond restricting network access — patching is the only real fix.
ciscoisecve-2026-76460
4 min readRead