Cisco’s SD-WAN management software has been letting some attackers walk through an authentication check without having to prove who they are. The company says it has now fixed the flaw that was allowing it. The affected platform, Cisco Catalyst SD-WAN Manager, is used to configure and operate software-defined network deployments. Cisco said in an... Weiterlesen: Cisco SD-WAN Manager hit by zero-day admin access attack
Intelligence View
⚡ tsecurity.de Intelligence
Cisco SD-WAN Manager hit by zero-day admin access attack
Cisco’s SD-WAN management software has been letting some attackers walk through an authentication check without having to prove who they are. The company says i…
Social Reaktionen1 Klick Feedback
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes
Initial Access
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
No reader ratings yet
Was this page helpful?
0
Powered by tsecurity.de
tsecurity.de Hub
Related story clusters & sources (vector AI)
35 sources
CVE-2026-78669 | Go http HTTP 2 amplification (ID 847186 / EUVD-2026-95426)
34 more sources
VVulDB Updates1 hour agoCVE-2026-97031 | Google crypto tls up to 1.26.8/1.27.1 Packet amplification (EUVD-2026-95422 / Nessus ID 370347) VVulDB Updates1 hour agoCVE-2026-78392 | Link Library Plugin up to 7.9.5 on WordPress link cross site scripting (EUVD-2026-108018) VVulDB Updates1 hour agoCVE-2026-112832 | Cozymes Rootblox Plugin up to 1.0.6 on WordPress require file inclusion (EUVD-2026-108139) VVulDB Updates1 hour agoCVE-2026-111971 | Photo Engine Plugin up to 6.5.7 on WordPress Administrative Dashboard cross site scripting (EUVD-2026-108016) VVulDB Updates1 hour agoCVE-2026-111972 | Photo Engine Plugin up to 6.5.7 on WordPress authorization (EUVD-2026-108017) VVulDB Updates1 hour agoCVE-2026-112842 | Cozmoslabs Paid Member Subscriptions Plugin up to 3.1.2 on WordPress authorization (EUVD-2026-108138)
+28
15 sources
When to Change the Locks in Your Matrix (matrix-conf-2026)
14 more sources
CChaos Computer Club16 hours agoNI2CE network effects in a voluntary adoption paradigm (matrix-conf-2026) CChaos Computer Club16 hours agoTowards a Post-Quantum Matrix Protocol: A Hybrid Design Adapted to the Brazilian Scenario (matrix-conf-2026) CChaos Computer Club16 hours agoSpeedrun Client with the Matrix Rust SDK (matrix-conf-2026) CChaos Computer Club16 hours agoSustainable Digital Sovereignty (matrix-conf-2026) CChaos Computer Club16 hours agoWhat's New in the Matrix Rust SDK (matrix-conf-2026) CChaos Computer Club16 hours agoPreserving Integration, Rebuilding the Core: Matrix for Healthcare Communication (matrix-conf-2026)
+8
9 sources
CVE-2026-96361 | Drupal Webform up to 6.2.12/6.3.1 cross site scripting (WID-SEC-2026-3554)
8 more sources
VVulDB Updates3 hours agoCVE-2026-96362 | Drupal Webform up to 6.2.11/6.3.0 cross site scripting (WID-SEC-2026-3554) VVulDB Updates3 hours agoCVE-2026-96364 | Drupal Webform up to 6.2.11/6.3.0 allocation of resources (WID-SEC-2026-3554) VVulDB Updates3 hours agoCVE-2026-96363 | Drupal Webform Plugin up to 6.2.11/6.3.0 cross site scripting (WID-SEC-2026-3554) VVulDB Updates3 hours agoCVE-2026-96366 | Drupal Webform Plugin up to 6.2.11/6.3.0 improper authorization (WID-SEC-2026-3554) VVulDB Updates3 hours agoCVE-2026-96365 | Drupal Webform up to 6.2.11/6.3.0 allocation of resources (WID-SEC-2026-3554) VVulDB Updates3 hours agoCVE-2026-96367 | Drupal Webform Plugin up to 6.2.11/6.3.0 cross site scripting (WID-SEC-2026-3554)
+2
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/en/4222401/vulnerabilities-cve/cisco-sd-wan-manager-hit-by-zero-day-admin-access-attack/