Vulnerabilities & Exploits2 October 2026
CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV
CISA has confirmed active exploitation of a critical authentication bypass in Cisco Catalyst SD-WAN Manager, tracked as CVE-2026-76504. Federal agencies had until 3 October 2026 to remediate. Every other operator should treat the flaw as urgent too.
ciscosd-wancisa-kev
3 min readRead
Vulnerabilities & Exploits20 September 2026
Cisco ISE CVE-2026-76460 (CVSS 10) and Email Gateway CVE-2026-76461: Exploited Zero-Days
Cisco has patched two unrelated but actively exploited flaws in appliances that sit on the identity and mail perimeter. Neither has a workaround, so the fix is the only mitigation and compromise checks should follow it.
ciscozero-daycve-2026-76460
3 min readRead
Vulnerability Management17 September 2026
Cisco ISE Zero-Day (CVE-2026-76460, CVSS 10.0) Actively Exploited — No Workaround
A maximum-severity authentication bypass in Cisco Identity Services Engine is being exploited in the wild, with no interim mitigation beyond restricting network access — patching is the only real fix.
ciscoisecve-2026-76460
4 min readRead