CVE-2026-76504

Published 30 September 2026 · tracked since 1 October 2026

Description

A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user.This vulnerability is due to improper handling of URI encoding in an HTTP request, wh

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-97661 HIGH 7.2
• CVE-2026-92244 HIGH 7.2
• CVE-2026-95687 HIGH 8.8
• CVE-2026-96268 MEDIUM 6.4
• CVE-2026-96573 HIGH 7.2
• CVE-2026-96813 HIGH 7.2
• CVE-2026-15983 HIGH 8.1
• CVE-2026-85235 HIGH 7.2
• CVE-2026-89424 MEDIUM 6.4
• CVE-2026-90992 MEDIUM 6.4

→ Open the live CVE board · all tools