CVE-2026-76504
CVE-2026-76504: 1 tracked advisory record across Cisco. CISA KEV listed; exploitation observed. Compare vendor sources and published fix guidance.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Vendor advisory comparison
Cisco
1 advisory- Advisory severityCritical9.8
Critical [CVE-2026-76504] Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability
cisco-sa-sdwan-webauth-xr8beuuUSource published Source updated
An unauthenticated remote attacker could exploit a flaw in the API session-based authentication management of Cisco Catalyst SD-WAN Manager to access an affected system with privileges of the admin user. The flaw is caused by improper handling of URI encoding in an HTTP request, which allows the request to bypass an authentication rule that is intended to restrict access to a specific API endpoint. Cisco has released a Live Protect shield for CVE-2026-76504 to provide temporary security coverage to allow time for software upgrade planning, including preserving any information that customers may require for governance or compliance purposes.
- Affected products in this advisory
- Catalyst SD-WAN Manager
- Source-reported affected versions
- Scope: This vulnerability affects Cisco Catalyst SD-WAN Manager, regardless of system configuration.
- Earlier than 20.9 — Migrate to a fixed release
- Release 20.9 (first fixed: 20.9.10.1)
- Release 20.12 (first fixed: 20.12.8.2)
4 more entries in the full advisory.
- Source-reported fixed versions
- 20.9.10.1
- 20.12.8.2
- 20.15.6.1
- 20.18.4.1
2 more entries in the full advisory.
- Mitigation guidance
- Upgrade to the first fixed release for your train per the Fixed Releases table in this advisory.
- Earlier than 20.9: migrate to a fixed release.
- Release 20.9: upgrade to 20.9.10.1.
- Release 20.12: upgrade to 20.12.8.2.
4 more entries in the full advisory.
- Workarounds
- There are no workarounds that address this vulnerability. However, as a mitigation for On-Prem deployment customer environments, they should restrict access from unsecured networks, such as the internet, to the system. If access to the system is required from the internet, restrict system access to only known, trusted hosts on ports and protocols that are included in the user guides. Protect Ci…
- For Cisco Catalyst SD-WAN Cloud Hosted environments, this mitigation is already deployed.
Android app · Google Play
Monitor future Cisco CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.