Ongoing exploitation of Cisco Catalyst SD-WAN vulnerabilities

Reported 14 May 2026 by otx · Severity: medium

Cisco Talos tracks active exploitation of CVE-2026-20182, an authentication bypass vulnerability in Cisco Catalyst SD-WAN Controller and Manager, allowing remote attackers to obtain administrative privileges. The exploitation is attributed to UAT-8616, a sophisticated threat acto