CVE-2026-76504
Named by 5 kept items in this workspace.
4 items name it under cves and 1 under classification.key entities.
Search every workspace for CVE-2026-76504. It matches the name as written, so it can find other things that share it.
The items that name it 5
Critical API authentication bypass in Cisco Catalyst SD-WAN Manager due to improper handling of URL encoding (CWE-177); CVSSv3.1 score 9.8; allows an unauthenticated remote attacker to send a crafted HTTP request bypassing an authentication rule for a specific API endpoint, gaining access with admin
Critical authentication bypass in Cisco Catalyst SD-WAN Manager (vManage), disclosed as an exploited zero-day via Cisco out-of-band security advisory on September 30; allows an unauthenticated attacker to obtain a fully valid admin-level session with a single POST request. Root cause: CWE-177 (impro
Cisco Catalyst SD-WAN Manager security flaw under in-the-wild exploitation (details not given).
Cisco Catalyst SD-WAN Manager; CWE-177; added 2026-09-30, due 2026-10-03
All cves in this workspace.