Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability — CISCO-SA-SDWAN-WEBAUTH-XR8BEUUU

Summary

A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user. This vulnerability is due to improper handling of URI encoding in an HTTP request, which allows the request to bypass an authentication rule that is intended to restrict access to a specific API endpoint.…

Timeline

Published by source

2026-09-30

Risk context

• Reported severity or threat level: critical.
• Review exposure for the affected product or family: Cisco Catalyst SD-WAN Manager API Authentication Bypass.

Product

Cisco Catalyst SD-WAN Manager API Authentication Bypass

What to do

General, cautious steps (verify details in the official source):

• Prioritize patching or mitigation immediately (treat as actively risky).
• Identify affected product versions in your inventory and verify whether you are impacted.
• Apply vendor patches/updates or recommended mitigations as soon as available.
• Read the official advisory for exact affected versions and remediation steps.

Official advisory

• Read the official source
• CVE Record
• NVD

Evidence and provenance

Canonical advisory ID

CISCO-SA-SDWAN-WEBAUTH-XR8BEUUU

Source

Cisco

Vendor

Cisco

Published by source

2026-09-30

Last source activity

2026-09-30

Additional identifiers

CVE-2026-76504

Curated by

hlukh.ch

Related advisories and connections

These advisories are connected by shared CVE, product, vendor, source, or time signals.