Topic

Cve 2026 76504

Coverage tagged cve 2026 76504.

Articles: 1
Desk: 1

Data graphic: A critical-rated Cisco Catalyst SD-WAN Manager zero-day, CVE-2026-76504 CVSS 9.8 , shown as an attack path. A crafted request to POST /%6a_security_check, where %6a decodes to j, never matches the authentication rule and gets unauthenticated admin API access. CISA added it to KEV on 30 Sep with a 3 Oct deadline, and there is no workaround.

criticalExploits Cve 2026 76504

Cisco SD-WAN Manager Zero-Day CVE-2026-76504: One Encoded Character Unlocks the Admin API

CVE-2026-76504 lets an unauthenticated attacker URL-encode one character to slip past Cisco SD-WAN Manager API login as admin. Exploited; no workaround.

Oct 2 · 5 min