Cisco has warned of active exploitation of CVE-2026-76504 — a CVSS 9.8 authentication bypass in Cisco Catalyst SD-WAN Manager. The mechanic is simple: hex-encode a character in the URI (%6a instead of j), and the authentication rule for j_security_check doesn't match. Request reaches the protected API endpoint. Admin access granted. No credentials... Weiterlesen
Intelligence View
⚡ tsecurity.de Intelligence
Cisco SD-WAN Manager CVE-2026-76504 — CVSS 9.8 Auth Bypass via URI Encoding, Actively Exploited
Cisco has warned of active exploitation of CVE-2026-76504 — a CVSS 9.8 authentication bypass in Cisco Catalyst SD-WAN Manager. The mechanic is simple: hex-encode a character in the URI (%6a instead of j), and the authentication rule for j…
Reagiere als Erste:r — dein Feedback zählt!
SOCIAL SHARE CARD GENERATOR