Cisco Warns of Actively Exploited Critical SD-WAN Vulnerability Allowing Remote Administrative Access

Cisco has issued an urgent security advisory after confirming that a critical authentication bypass vulnerability affecting its Catalyst SD-WAN infrastructure is being actively exploited in real-world attacks, prompting widespread concern across enterprise and government networks worldwide.

The flaw, tracked as CVE-2026-20182, carries the maximum possible CVSS severity score of 10.0 and impacts several core components of Cisco’s SD-WAN ecosystem. According to the company, attackers can exploit the vulnerability remotely and without authentication to gain elevated administrative access to affected systems.