#sd-wan

Analysis · May 14, 2026 · Colten Anderson

Rapid7 found a second CVSS 10 in Cisco SD-WAN while researching the first

Two unauthenticated auth bypasses in the same Cisco vdaemon in under three months, both being exploited by the same actor that has been sitting in critical-infrastructure fabrics since 2023.