Skip to content

CyberSIXT Search

CVE · coverage timeline

CVE-2026-20127Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability

22 articles from 8 outlets between 25 Feb and 29 Oct. First reported by CISA, the day CISA added it to KEV. The busiest day was Thu 26 Feb, with 7 articles.

Articles: 22; all time · from 8 outlets
Days covered: 12; of 247 days · all time
Busiest day: 7; articles on Thu 26 Feb
Last 7 days: 0.3a day; vs 0.1 a day · previous 7 days
Report to KEV: 0days; listed 25 Feb
Federal deadline: Passed; Fri 27 Feb · 243 days ago

Coverage over time

22 articles · 25 Feb – 29 Oct

25 FebFirst report25 Feb · CISA
25 FebAdded to CISA KEV25 Feb · cisa.gov
27 FebFederal deadlineFri 27 Feb, 23:59 UTC

Show as table

CVE-2026-20127: articles per day
Day (UTC)	Articles	Outlets
Wed 25 Feb	2	CISA 2
Thu 26 Feb	7	Security Affairs 2, Rapid7 1, The Hacker News 1, SecurityWeek 1, Infosecurity 1, Dark Reading 1
Mon 2 Mar	1	The Hacker News 1
Thu 5 Mar	2	SecurityWeek 1, The Hacker News 1
Sun 8 Mar	1	SecurityWeek 1
Thu 12 Mar	1	Infosecurity 1
Fri 13 Mar	1	Dark Reading 1
Thu 14 May	2	Security Affairs 1, Dark Reading 1
Fri 15 May	2	The Hacker News 1, SecurityWeek 1
Wed 30 Sep	1	Rapid7 1
Wed 28 Oct	1	The Hacker News 1
Thu 29 Oct	1	SecurityOnline 1

Articles

22 articles

Thu 29 Oct1 article

03:30
UAT-11473 implants KeyDrift malware on Cisco SD-WAN systemsSecurityOnline

Wed 28 Oct1 article

19:30
Volt Typhoon Used Silent Train in Four Zero Day CampaignsThe Hacker News · mentions it in passing

Wed 30 Sep1 article

18:38
Cisco SD-WAN Flaw Exploited to Grant Attackers Admin AccessRapid7 · mentions it in passing

Fri 15 May2 articles

06:41
Cisco patches SDWAN zero day CVE-2026-20182 exploited by UAT8616SecurityWeek · mentions it in passing
06:11
CISA warns of Cisco Catalyst SDWAN flaw amid active exploitationThe Hacker News · mentions it in passing

Thu 14 May2 articles

20:51
Cisco SD WAN flaw lets attackers seize control, patch urgedDark Reading · mentions it in passing
19:41
U.S. CISA adds a flaw in Cisco Catalyst SD-WAN to its Known Exploited Vulnerabilities catalogSecurity Affairs · mentions it in passing

Fri 13 Mar1 article

20:15
Fake PoCs, Misunderstood Risks Cause Cisco SD-WAN ChaosDark Reading

Thu 12 Mar1 article

13:09
CISA Issues Emergency Directive Over Exploited Cisco SD-WAN FlawsInfosecurity

Sun 8 Mar1 article

12:49
Cisco Catalyst SDWAN flaw CVE-2026-20127 fuels internet attacksSecurityWeek

Thu 5 Mar2 articles

16:41
Cisco warns CVE-2026-20122 and CVE-2026-20128 exploited in SD-WANThe Hacker News · mentions it in passing
12:29
Catalyst SD WAN flaws CVE-2026-20128 exploited, Cisco warnsSecurityWeek · mentions it in passing

Mon 2 Mar1 article

14:13
Cisco SD WAN CVE-2026-20127 flaw bypasses auth for adminThe Hacker News

Thu 26 Feb7 articles

22:10
Cisco Catalyst SD WAN zero day CVE-2026-20127 exploited for yearsDark Reading
16:01
CISA: CVE-2026-20127 lets attackers gain admin on Cisco SD WANSecurity Affairs · mentions it in passing
12:56
CVE-2026-20127: Critical Cisco SD WAN flaw gives root accessSecurity Affairs
09:53
Five Eyes warn Cisco SD WAN zero day grants admin CVE-2026-20127Infosecurity
09:52
Cisco patches exploited Catalyst SD WAN zero day CVE-2026-20127SecurityWeek
06:49
Critical CVE-2026-20127 in Cisco SD WAN gives remote admin accessThe Hacker News
00:45
CISA orders emergency patch for Cisco SD WAN after CVE-2026-20127Rapid7

Wed 25 Feb2 articles

17:34
CISA adds CVE-2026-20127: Cisco SD WAN allows admin takeoverCISA · official notice
17:32
CISA adds CVE-2026-20127 after exploit of Cisco SD WAN auth bypassCISA · first report · official notice