AI Summary

Cisco has identified a max‑severity authentication bypass flaw in its Catalyst SD‑WAN Controller (formerly vSmart) and Catalyst SD‑WAN Manager (formerly vManage). The vulnerability allows an unauthenticated, remote attacker to bypass authentication and gain administrative privileges on affected systems. Cisco discovered the flaw while investigating a prior authentication bypass that was patched in February. The company confirmed limited exploitation of the bug in May 2026, though it did not disclose details of the attacks or threat actors. Software updates now fix the zero‑day flaw, and Cisco urges organizations to apply the patches immediately, as no workaround exists.

AI summaries can be wrong sometimes—always verify important details using the source article.