CyberSIXT Search
Original

CISA

CISA Adds Cisco SD WAN Manager Flaw to KEV Following Active Exploit

Part of the CVE-2026-20245 story · 17 articles · 9 outlets · since 5 Jun

The CISA maintains a Known Exploited Vulnerabilities (KEV) Catalog, aimed at aiding cybersecurity professionals in managing vulnerabilities. The catalog lists vulnerabilities that are actively exploited, helping organizations prioritize their vulnerability management. One specific entry is the CVE-2026-20245, related to Cisco Catalyst SD-WAN Manager, which poses a risk of arbitrary command execution by authenticated local attackers.

Organizations are advised to implement vendor-mitigation instructions or discontinue using the product if necessary. The KEV catalog is available in various formats, including CSV and JSON, and users can subscribe for updates on new entries.

Story timeline CVE-2026-20245

Full timeline
Show as table
CVE-2026-20245 coverage
Published (UTC)OutletHeadline
Fri 5 Jun · 02:20 UTCSecurityOnlineCisco SD-WAN CVE-2026-20245 flaw lets hackers gain root via file upload
Fri 5 Jun · 06:15 UTCSecurityWeekCisco SDWAN flaw lets attackers gain root via CLI exploit
Fri 5 Jun · 14:41 UTCSecurity AffairsCisco SD-WAN Has a New Root-Level Problem, and There’s No Fix Yet
Sat 6 Jun · 06:07 UTCThe Hacker NewsCritical Cisco SDWAN flaw CVE-2026-20245 exploited, no patch
Tue 9 Jun · 19:14 UTCCISACISA Adds Cisco SD WAN Manager Flaw to KEV Following Active Exploit
Tue 9 Jun · 20:13 UTCCISACISA Adds Cisco SD WAN Manager Flaw to KEV Following Active Exploit (this article)
Wed 10 Jun · 02:40 UTCSecurityOnlineCISA warns of critical flaws in Chromium, Arista and Cisco gear
Wed 10 Jun · 09:10 UTCSecurityOnlineArchitectural Exposure: Developers Extract Apple’s Subterranean Core Prompts for Siri AI
Wed 10 Jun · 09:11 UTCSecurityOnlineHavoc Stager Uses Fake Invoices to Hit South American Firms
Wed 10 Jun · 11:28 UTCSecurity AffairsCISA flags Arista, Chrome, Cisco flaws; patch by June 23
Wed 24 Jun · 14:42 UTCGoogle CloudZero-Day Exploitation of Vulnerability (CVE-2026-20245) in Cisco Catalyst SD-WAN Manager
Wed 24 Jun · 21:50 UTCDark ReadingCisco Catalyst SD WAN bug exploited pre patch, gave root access
Thu 25 Jun · 06:30 UTCSecurityWeekCisco SDWAN flaw lets attackers run root commands, Mandiant warns
Thu 25 Jun · 06:31 UTCThe Hacker NewsCVE-2026-20245 exposes Cisco Catalyst SD WAN zero day flaw
Thu 25 Jun · 10:11 UTCSecurity AffairsCisco Catalyst SDWAN zero day exploited months before fix
Thu 25 Jun · 14:21 UTCInfosecurityGoogle warns Cisco flaw exploited months before June 2026 patch
Fri 26 Jun · 14:21 UTCSecurityOnlineCisco SD-WAN Zero-Day Exploited in Attacks

Sources

Original articlecisa.govPrimary sourcesec.cloudapps.cisco.com

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.
↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device