Catalyst SD-WAN 26.2 vulnerabilities
2 advisories affect Cisco Catalyst SD-WAN 26.2, 2 already exploited by attackers. Latest: October 2, 2026.
Running Catalyst SD-WAN 26.2 devices? Get an email when a new vulnerability comes out. Free, unsubscribe in one click.
Turn on Catalyst SD-WAN 26.2 alerts
Turn on Catalyst SD-WAN 26.2 alerts
| Vulnerability | Severity | Affected versions |
|---|---|---|
| Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability CVE-2026-76504 · October 2, 2026 | Critical 9.8 Exploited | 26.2.1_LI_Images |
| Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability CVE-2026-76504 · September 30, 2026 | Critical 9.8 Exploited | 26.2.1_LI_Images |
Affected versions are compiled automatically from vendor advisories and NVD and may contain errors. Where no fixed version is shown, you will find it in the official advisory linked from every page: check it there before updating.
Other Catalyst SD-WAN versions: 26.1 · 26.0 · 20.18 · 20.16 · 20.15 · 20.14 · 20.13 · 20.12 · 20.11 · 20.10 · 20.9 · 20.8 · 20.7 · 20.6 · 20.5 · 20.4 · 20.3 · 20.1 · 19.3 · 19.2 · 19.1 · 19.0 · 18.4 · 18.3 · 18.2 · 17.2