Cisco patches critical SD-WAN zero-day exploited in active attacks

Cisco has released security updates for a critical zero-day vulnerability (CVE-2026-76504) in Catalyst SD-WAN Manager, which is being actively exploited to gain admin privileges. The flaw allows privilege escalation, and exploitation is confirmed in the wild. Organizations using affected SD-WAN deployments should prioritize patching, as the vulnerability could enable network compromise.