Cisco warns of new critical SD-WAN flaw exploited in zero-day attacks

Cisco has warned of a critical flaw in its Catalyst SD-WAN Controller that is being exploited in zero-day attacks, allowing attackers to gain administrative privileges on compromised devices. The flaw, tracked as CVE-2026-20182, is an authentication bypass vulnerability. Cisco is warning users to take immediate action to protect their devices.