CVE · Exploited · On CISA KEV

CVE-2026-76504

Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability

9.8: CVSS 3.1
1: story
SEP 30: added to KEV

Severity: 9.8 Critical · vendor score
Vendor: Cisco
Product: Catalyst SD-WAN Manager
Published: Sep 30, 2026
Added to KEV: Sep 30, 2026
KEV deadline: Oct 3, 2026
Ransomware use: Unknown
Weakness: CWE-177

What it is

Cisco Catalyst SD-WAN Manager contains a hex encoding vulnerability that could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user due to improper handling of URI encoding in an HTTP request.

From CISA's Known Exploited Vulnerabilities catalog

Decipher coverage · 1 story

Newest first ↑

OCT 1
VulnerabilitiesCisco Warns of Critical, Exploited Catalyst SD-WAN Manager FlawCisco “strongly recommends” customers apply a patch for a critical API authentication bypass that’s being exploited.LINDSEY O'DONNELL-WELCH · 1 MIN

Official references

4 sources

Registries

RegistryNVDScore, weakness and every reference RegistryCVE.orgThe official CVE record RegistryCISA KEVKnown exploited, with the federal deadline

Advisories, fixes & analysis

Fixsec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-webauth-xr8beuuU