Rapid7

Rapid7 reports a critical API authentication bypass vulnerability in Cisco Catalyst SD-WAN Manager, tracked as CVE-2026-76504, that is being actively exploited in the wild. The flaw lets attackers bypass authentication on the network management platform, prompting security teams to review patching and mitigation guidance for affected deployments.