CRITICALZero Day
Global

Cisco Patches Another SD-WAN Zero-Day Exploited in Attacks

·Source: SecurityWeek

Updated:

Executive Summary

Cisco recently became aware of the exploitation of CVE-2026-20262, a Catalyst SD-WAN Manager zero-day that allows arbitrary file write. The post Cisco Patches Another SD-WAN Zero-Day Exploited in Attacks appeared first on SecurityWeek .

Analysis

Cisco recently became aware of the exploitation of CVE-2026-20262, a Catalyst SD-WAN Manager zero-day that allows arbitrary file write. The post Cisco Patches Another SD-WAN Zero-Day Exploited in Attacks appeared first on SecurityWeek .

Indicators of Compromise (1)

CVE (1)
CVE-2026-20262
NVDMITRE CVE
Source Attribution

Originally published by SecurityWeek on Jun 16, 2026.

Related Threats

CRITICALVulnerability

Cisco Releases Security Updates for Actively Exploited SD-WAN Manager Flaw

Cisco has released security updates for a medium-severity security flaw in Catalyst SD-WAN Manager that has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-20262, carries a CVSS score of 6.5 out of 10.0. "A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker to create a file or

CVE-2026-20262
The Hacker News
CRITICALZero Day

ShinyHunters Hits Universities Via Oracle Zero-Day

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/shinyhunters-hits-universities-via-oracle-zero-day-image_small-3-a-31979.jpg" align=right hspace=4><b>Mandiant: 68% of Targets Were Higher Ed Institutions Running PeopleSoft</b><br>ShinyHunters exploited a critical zero-day in Oracle PeopleSoft to breach more than 100 organizations globally, researchers at Mandiant and Google's Th

Bank Info Security
CRITICALZero Day

Cisco fixes SD-WAN vManage flaw exploited in zero-day attacks

Cisco has released security updates to address a vulnerability in the Catalyst SD-WAN Manager, tracked as CVE-2026-20262, that was exploited in attacks to escalate to root privileges. [...]

CVE-2026-20262
BleepingComputer