CVE-2026-76504

Vendor

Cisco

Product

Catalyst SD-WAN Manager

CVSS

9.8

EPSS

1.00 (p100)

CISA KEV

added 30 Sep 2026, due 3 Oct 2026 (29d overdue)

Weakness

CWE-177

Exposure class

Edge / VPN / firewall

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 93
   KEV NVD 30 Sep 2026

   Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability

   Cisco Catalyst SD-WAN Manager contains a hex encoding vulnerability that could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user due to improper handling of URI encoding in…

   KEV · due 3 Oct 2026 (overdue) CVSS 9.8 Fix available CVE-2026-76504 Cisco
2. 65
   CISA alert CISA 30 Sep 2026

   CISA Adds One Known Exploited Vulnerability to Catalog

   CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-76504 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability This type of…

   Exploited CVE-2026-76504 Cisco
3. 43
   Cisco advisory Cisco PSIRT 29d ago

   Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability

   A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user. This…

   Fix available CVE-2026-76504 Cisco
4. 43
   Cisco advisory Cisco PSIRT 30 Sep 2026

   Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability

   A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user. This…

   Fix available CVE-2026-76504 Cisco
5. 31
   Research Insikt Group 19d ago

   September 2026 CVE Landscape

   In September 2026, Insikt Group® identified 94 high-impact vulnerabilities that should be prioritized for remediation, 59 of which had a Very Critical Recorded Future Risk Score. This represents a 29% increase from last month.

   EPSS 1.00 CVE-2026-88771CVE-2026-88772CVE-2026-35273+57 more
6. 22
   Research Check Point Research 26d ago

   5th October – Threat Intelligence Report

   For the latest discoveries in cyber research for the week of 5th October, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Arizona’s state court system has suffered a phishing-led cyberattack after an…

   EPSS 0.26 CVE-2026-88771CVE-2026-88772CVE-2026-76504+2 more