Mandiant

Cisco Catalyst SD-WAN Manager Privilege Escalation (CVE-2026-20245)

CVE-2026-20245 is the seventh Cisco SD-WAN zero-day exploited in 2026. An authenticated attacker with netadmin privileges on Cisco Catalyst SD-WAN Manager can upload a specially crafted file to the CLI subsystem, triggering insufficient input validation and…