Maximum Severity Cisco SD-WAN Bug Exploited in the Wild

TechTarget and Informa Tech’s Digital Business Combine.TechTarget and Informa

Together, we power an unparalleled network of 220+ online properties covering 10,000+ granular topics, serving an audience of 50+ million professionals with original, objective content from trusted sources. We help you gain critical insights and make more informed decisions across your business priorities.

This is the second time this year a threat actor has leveraged a CVSS 10.0 vulnerability in Cisco's network control system.

May 14, 2026

A highly sophisticated threat actor is exploiting a critical vulnerability in Cisco Catalyst Software-Defined Wide Area Network (SD-WAN) Controllers.

Maximum Severity Cisco SD-WAN Bug Exploited in the Wild

Other newsrooms on this story

Related reading

Cisco warns of new critical SD-WAN flaw exploited in zero-day attacks

Other newsrooms on this story

Related reading

Cisco warns of new critical SD-WAN flaw exploited in zero-day attacks

Emergency Cisco Critical 0Day Update—Attackers Downgrade Security

CISA Adds Cisco SD-WAN CVE-2026-20182 to KEV After Admin Access Exploits

Cisco Catalyst SD-WAN Controller Auth Bypass Actively Exploited to Gain Admin…

Patch time for Cisco SD-WAN admins as vendor drops yet another make-me-admin…

CVSS vulnerability triage: 5 failures, 5 fixes