Cisco Catalyst SD-WAN Manager CVE-2026-76504 is a critical authentication bypass vulnerability (CVSS 9.8) actively exploited in the wild. The flaw allows unauthenticated remote attackers to gain administrative privileges through URL encoding manipulation, requiring immediate emergency patching.
CVE-2026-73570 enables unauthenticated command injection on Zimbra mail servers with confirmed active exploitation. Remote attackers execute arbitrary commands without authentication. Immediate patching and detection deployment required for internet-facing infrastructure.
Cisco warns of CVE-2026-76504, a critical zero-day in Catalyst SD-WAN Manager under active exploitation. Attackers can gain unauthenticated administrative access remotely. Organizations must apply emergency patches immediately to prevent network compromise.