Cisco SD-WAN Root Zero-Day Under Attack

Cisco says CVE-2026-20245 in Catalyst SD-WAN Manager is being exploited to turn netadmin access into root and push risky configuration changes. With no patch yet, teams should review Cisco IOCs, audit privileged accounts, and patch related SD-WAN flaws.