Cisco
Every ZeroDayFeed story on Cisco — across breaches, zero-days, ransomware, patches, policy, and industry, newest first.
-
Zero-Days & Exploits
Exploited Cisco Catalyst SD-WAN Manager flaw CVE-2026-76504 gives unauthenticated admin API access
Cisco says attackers are exploiting CVE-2026-76504 (CVSS 9.8), a URI-encoding authentication bypass in Catalyst SD-WAN Manager that grants unauthenticated admin-level API access. There is no workaround. CISA's October 3 federal patch deadline has passed.
-
Zero-Days & Exploits
Cisco Secure Email Gateway Flaw CVE-2026-76519 Exploited: Crafted Attachment Can Yield Root Access
Cisco says attackers are exploiting CVE-2026-76519 (CVSS 9.8), which lets an unauthenticated attacker gain root on a Secure Email Gateway with File Reputation enabled by sending a crafted attachment; there is no workaround, and CISA's October 17 KEV deadline has passed.