Cisco Catalyst SD-WAN Manager CVE-2026-20245 Flaw Actively Exploited – No Patch Available

June 6, 2026
No Comments

Cisco Catalyst SD-WAN Manager CVE-2026-20245 Flaw Actively Exploited – No Patch Available

Cisco has warned that a high-severity security flaw impacting Catalyst SD-WAN Manager has come under active exploitation.

The vulnerability, tracked as CVE-2026-20245, carries a CVSS score of 7.8 out of a maximum of 10.0. It affects the following deployment types –

On-Prem Deployment
Cisco SD-WAN Cloud-Pro
Cisco SD-WAN Cloud (Cisco Managed)
Cisco SD-WAN for Government (FedRAMP)

“A

Leave a Reply Cancel reply

From AI hype to operational reality: A practitioner’s framework for securing agentic systems June 5, 2026
Most organizations already have AI governance discussions underway. They have policies, working groups, acceptable-use guidance, and long lists of principles around responsible AI adoption. But as enterprises move deeper into agentic AI, many security teams are discovering that governance alone doesn’t translate into operational control. That gap is becoming increasingly dangerous. AI systems are no […]
Art Poghosyan
The missing link in cyber resilience: Bridging the identity visibility gap June 4, 2026
The enterprise security perimeter didn’t evolve; it dissolved, and what replaced it isn’t a newer, stronger boundary. It’s the absence of one. Today’s environment is dynamic and borderless, defined not by firewalls or network segments, but by identities: human users, service accounts, APIs, bots, workloads, and AI agents. Every access request, every system interaction, every […]
David Canellos
Dutch police, NCSC take down major botnet June 4, 2026
A collaboration between the Dutch National Police and the National Cyber Security Centre (NCSC), has seen a large botnet being shut down. In this operation, 200 servers were identified and addressed as well. These servers controlled millions of infected devices, from computers to phones, and were used to carry out cyberattacks. A security researcher first […]
Kirsten Doyle
Palo Alto warns of active exploitation of GlobalProtect authentication bypass flaw June 2, 2026
Palo Alto Networks has alerted customers about the ongoing exploitation of the authentication bypass vulnerability in PAN-OS GlobalProtect. The vulnerability, tracked as CVE-2026-0257, lets unauthenticated actors bypass security measures and set up unsanctioned connections to vulnerable GlobalProtect portals and gateways. A high CVSS score of 7.8 was assigned for this vulnerability. This issue was first […]
Kirsten Doyle
CrowdStrike, Google, and Shadowserver Foundation disrupt Glassworm botnet June 1, 2026
CrowdStrike has shared details of a coordinated operation used to disable the Glassworm botnet, which targets software developers and leverages open-source ecosystems to deploy malware. The CrowdStrike Counter Adversary Operations team, in partnership with Google and the Shadowserver Foundation, took down all four C2 centers of the Glassworm network on 26 May by disrupting all […]
Kirsten Doyle
Artificial intelligence and elections: When an election is annulled because of TikTok June 1, 2026
On 6 December 2024, the Constitutional Court of Romania took an unprecedented step: it annulled the first round of the country’s presidential election. Not over ballot-box fraud, nor over irregularities in the count, but because one candidate, the previously unknown Călin Georgescu, had emerged in first place through a coordinated influence operation on TikTok, with […]
Theofanis Kasimis
Threat Actors Deploy Tiflux RMM for Persistent Remote Access May 29, 2026
Threat actors are abusing legitimate RMM tools as a means of creating persistence inside victims’ systems, using the Tiflux RMM tool. Tiflux is a reputable Brazilian software platform used by IT departments and Managed Service Providers (MSPs) for managing IT assets, tickets, teams, and remote monitoring. As reported by Huntress, the campaign is using Tiflux […]
Kirsten Doyle
Building cyber resilience for mission-critical operations in 2026 May 27, 2026
For a long time, cybersecurity has been viewed as a technology-based problem, with leaders focused on crafting intelligent protective systems designed to prevent major attacks. However, as the threats faced by modern organizations grow increasingly sophisticated, agile, and unpredictable, the way teams approach cybersecurity must evolve. In a landscape where threats evolve faster than many […]
Sean Toohey
Major US telecom providers debut C2 ISAC to counter AI-driven threats May 26, 2026
Eight of the leading communications companies in the United States have created a new cybersecurity alliance that aims to improve threat intelligence sharing within the telecommunications industry, amid growing concerns about AI cyberattacks, state-sponsored espionage, and infrastructure attacks. The new cybersecurity partnership, the Communications Cybersecurity Information Sharing and Analysis Center (C2 ISAC), has been launched by eight […]
Kirsten Doyle
Passwordless security and the new identity battleground May 26, 2026
For years, passwords were the only thing that mattered for securing our online presence, but the discussion around authentication is evolving rapidly. Passkeys, biometrics, device trust, and adaptive identity management solutions are often cited as the key to the next level of security, while attackers are focusing on directly targeting our identity infrastructure. Session hijacking, […]
Kirsten Doyle

Cisco Catalyst SD-WAN Manager CVE-2026-20245 Flaw Actively Exploited – No Patch Available

IronWorm and New Miasma Worm Variant Hit npm in Supply Chain Attacks

AI Agent Uncovers 21 Zero-Days in FFmpeg; Chrome Patches Record 429 Bugs

Leave a Reply Cancel reply

[email protected]

Cisco Catalyst SD-WAN Manager CVE-2026-20245 Flaw Actively Exploited – No Patch Available

Cisco Catalyst SD-WAN Manager CVE-2026-20245 Flaw Actively Exploited – No Patch Available

Share :

Leave a Reply Cancel reply