CVE-2026-76504 — Vulnerability intelligence

Cisco — Catalyst SD-WAN Manager

Published: 2026-09-30T13:04:32.095Z

CVSS

9.8

CISA KEV

Known exploitation

Original source text (not a translation)

Cisco Catalyst SD-WAN Manager contains a hex encoding vulnerability that could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user due to improper handling of URI encoding in an HTTP request.

Sources

• Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• CVE-2026-76504