CRITICALZero Day
Global

Mandiant reveals how Cisco SD-WAN zero-day attacks gained root access

·Source: BleepingComputer

Updated:

Executive Summary

New details have been revealed on how hackers exploited a Cisco Catalyst SD-WAN vulnerability tracked as CVE-2026-20245 in zero-day attacks to create rogue root accounts on targeted devices. [...]

Analysis

New details have been revealed on how hackers exploited a Cisco Catalyst SD-WAN vulnerability tracked as CVE-2026-20245 in zero-day attacks to create rogue root accounts on targeted devices. [...]

Indicators of Compromise (1)

CVE (1)
CVE-2026-20245
NVDMITRE CVE
Source Attribution

Originally published by BleepingComputer on Jun 24, 2026.

Related Threats

CRITICALZero Day

Nissan Traces Data Breach to PeopleSoft Zero-Day Exploit

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/nissan-traces-data-breach-to-peoplesoft-zero-day-exploit-image_small-10-a-32113.jpg" align=right hspace=4><b>Extortionists Add National Association of Insurance Commissioners to Breach List</b><br>Japanese automotive giant Nissan and the U.S. National Association of Insurance Commissioners are the latest organizations to confirm t

Bank Info Security
CRITICALZero Day

Nissan Discloses Employee Data Breach Linked to Oracle Zero-Day

Nissan says employees' data was stolen via the Oracle PeopleSoft zero-day campaign

Infosecurity Magazine
CRITICALZero Day

Nissan discloses employee data breach linked to Oracle zero-day attacks

Nissan is warning that it suffered a data breach affecting current and former employees after threat actors exploited an Oracle PeopleSoft vulnerability in data theft attacks previously linked to the ShinyHunters extortion group. [...]

BleepingComputer