Cisco has issued urgent patches for a critical zero-day vulnerability (CVE-2026-76504) in its Catalyst SD-WAN Manager. The flaw, which allows remote, unauthenticated administrative access, is confirmed to be under active exploitation by attackers. CISA has
Cisco has issued a critical warning regarding active exploitation of an authentication bypass vulnerability, CVE-2026-76504, in its Catalyst SD-WAN Manager. The flaw allows unauthenticated remote attackers to gain administrative control.
Arista has released urgent security updates for its on-premises VeloCloud Orchestrator to address a critical zero-day vulnerability currently being exploited by remote attackers.
Attackers are actively exploiting a critical CVSS 10.0 flaw in Arista's on-premises VeloCloud Orchestrator, potentially compromising SD-WAN edge devices.