CVE-2026-20245

notes

Mandiant reveals how Cisco SD-WAN zero-day attacks gained root access

1. Executive summary Mandiant has published detailed attack-chain analysis of CVE-2026-20245 (CVSS 7.8 HIGH, CWE-116), a now-patched privilege-escalation zero-

25 Jun 2026 · 9 min read read →

notes

Cisco adds another SD-WAN box to max-severity bug advisory

1. Executive summary Cisco has amended its February 2026 advisory for CVE-2026-20127 (CVSS 10.0, improper authentication) to add Cisco Catalyst SD-WAN Validator

18 Jun 2026 · 6 min read read →

notes

Cisco SD-WAN make-me-root bug under attack

1. Executive summary Cisco has released a fix for CVE-2026-20262, a file-upload input-validation flaw in the web UI of Cisco Catalyst SD-

16 Jun 2026 · 6 min read read →