Vulnerabilities · 190 days ago

UAT-8616 activity affects Cisco Catalyst SD-WAN Controller

UAT‑8616 has exploited an unauthenticated authentication‑bypass zero‑day in Cisco Catalyst SD‑WAN Controller and Manager.

CVE-2026-20127

NVD KEV

Known exploited · CISA KEV

CVSS 10 CRITICAL: a vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, and Cisco… EPSS 88% (100th percentile).

CISA federal remediation date Feb 27 · date passed

Timeline

Sources

1 source covering this story

Entities

Vendor digest: Cisco

Part of the PlainSec briefing for 2026-03-10

Editions

Related stories