EXPOSURES › CVE-2026-76504
CVE-2026-76504
HIGH ⌖ ON CISA KEV · EXPLOITEDAn unauthenticated remote attacker could escalate to admin privileges via improper URI encoding in Cisco Catalyst SD-WAN Manager.
Cisco Catalyst SD-WAN Manager suffered a hex encoding vulnerability allowing unauthenticated remote attackers to gain admin privileges. DIB organizations must patch immediately as this flaw is actively exploited in the wild, indicating a critically compromised security posture. The vendor's poor track record of multiple high-severity vulnerabilities in 2026 demands heightened scrutiny of their supply chain.
Shame score — The vulnerability allows unauthenticated remote attackers to escalate to admin privileges and is actively exploited in the wild, reflecting a critically compromised security posture and poor vendor track record.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Cisco Catalyst SD-WAN Manager contains a hex encoding vulnerability that could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user due to improper handling of URI encoding in an HTTP request.
| PRODUCT | STATUS |
|---|---|
| Cisco Cloudlock for Government Cisco Systems Inc. |
Authorized |
| Cisco Meraki for Government Cisco Systems Inc. |
In Process |
| Cisco SD-WAN for Government Cisco Systems Inc. |
In Process |
| Cisco Umbrella for Government Cisco Systems Inc. |
In Process |
| Cisco Unified Communications Manager Cloud for Government (Cisco UCM Cloud for Government) Cisco Systems Inc. |
Authorized |
| Duo Federal Duo Security (A Cisco Company) |
Authorized |
| WebEx Contact Center Enterprise for Government (WxCCE-G) Cisco Systems Inc. |
In Process |
| Webex for Government Cisco Systems Inc. |
Authorized |