CISA Adds Actively Exploited Cisco SD-WAN Manager Vulnerability to KEV Catalog
Summary
CISA added Cisco Catalyst SD-WAN Manager vulnerability CVE-2026-76504 to its Known Exploited Vulnerabilities Catalog based on evidence of active exploitation and urged organizations to prioritize remediation.
Key points
- CVE-2026-76504 is a hex encoding vulnerability in Cisco Catalyst SD-WAN Manager.
- CISA added the vulnerability to its KEV Catalog after finding evidence of active exploitation.
- Under BOD 26-04, FCEB agencies must prioritize KEV vulnerabilities on publicly exposed assets that could grant total control if exploited.
- The directive sets expectations for agencies to check whether systems were compromised before patching.
- CISA encourages all organizations to prioritize remediation of KEV vulnerabilities using risk-based vulnerability management.
Article Details
- Vulnerability Types
- Hex Encoding Vulnerability
- Exploitation Status
- active
- Exploit Availability
- unknown
- Patch Status
- unknown