Attributed metadata history
Up to 100 retained publisher events per page for e9e82fb3247a9cb93f5564c80fb74be03b5846f418743469bb553264eacfc334. Withdrawals and unavailable references remain attributed to their publishers.
intelligence_src_1325ef79144357aa4c
observed · 2026-10-12 06:54:03 UTC
available
Fingerprint: 5ca1ad11a287d68faf40b677306c4802f5be91bc1af4f6c958597def6b2d022e
intelligence_src_1325ef79144357aa4c
observed · 2026-10-12 06:54:03 UTC
A vulnerability has been discovered in Cisco Catalyst SD-WAN Manager (formerly SD-WAN vManage) that could allow for authentication bypass. Cisco Catalyst SD-WAN Manager is the centralized dashboard used to monitor and manage SD-WAN fabric devices, in some deployments up to several thousand devices from a single console. An attacker could exploit this vulnerability by sending a specially crafted HTTP request with a URI-encoded character to the Manager's API, which could allow the request to skip an authentication rule intended to restrict access to a specific endpoint. Successful exploitation of this vulnerability could result in an unauthenticated, remote attacker gaining admin-level access to the affected system's API, and by extension the ability to view or modify the configuration of every SD-WAN device that Manager instance controls. This vulnerability affects the product regardless of device configuration; there is no feature toggle or configuration setting that removes the exposure.
Fingerprint: b0591ba959f251907c62ffb4b2b6231a1104bdb55917f4654534d3a17ff26e78