Cisco SD-WAN Admin Bypass Under Active Exploitation

Cisco patched CVE-2026-20182, an actively exploited Catalyst SD-WAN authentication bypass that could let remote attackers gain administrator control. Patch affected controllers and managers, then audit SSH keys, NETCONF changes, and admin/root activity.