CVE-2026-20127_EXP

CVE-2026-20127EXP Cisco Catalyst SD-WAN 身份验证绕过漏洞CVE-2026-20127漏洞利用EXP 基础用法 python scan.py -f targets.txt 显示详细信息 python scan.py -f targets.txt -v 调整线程数并保存结果 python scan.py -f targets.txt -t 10 -o vulnerable.txt 指定WAR文件路径 python scan.py -f targets.txt -w cmd.war 指定WAR文件路径调整线程并保存结果 python scan.py -f...

CVE-2026-76504-Proof-of-concept

Cisco Catalyst SD-WAN Manager — CVE-2026-76504 由于 API 会话管理层对 URL 编码处理不当（CWE-177），导致未认证的认证绕过。 精心构造的请求可到达特权端点，并被当作已认证的管理员会话处理。 概述 该漏洞允许远程未认证攻击者绕过 Catalyst SD-WAN Manager API 上的预期访问控制。一旦绕过成功，攻击者便拥有完整的管理员权限，可以读取配置、修改系统状态或下发管理命令。 受影响版本 已在以下版本上测试并确认可利用： 20.9.x（低于 20.9.10.1） 20.12.x（低于 20.12.8.2）...

Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability (cisco-sa-sdwan-webauth-xr8beuuU)

According to its self-reported version, Cisco SD-WAN Viptela Software is affected by a vulnerability. - An authentication bypass vulnerability exists in the API session-based authentication management of Cisco Catalyst SD-WAN Manager due to improper handling of URI encoding hex encoding in HTTP...

CVE-2026-20245---Cisco-SD-WAN-Privilege-Escalation-Exploit

CVE-2026-20245 - Cisco SD-WAN 权限提升利用工具 ⚠️ 警告 此代码仅用于教育目的和授权的安全测试。 📋 描述 CVE-2026-20245 是 Cisco Catalyst SD-WAN Controller vSmart、Cisco Catalyst SD-WAN Manager vManage 和 Cisco Catalyst SD-WAN Validator vBond CLI 中的一个权限提升 漏洞。拥有 netadmin 权限的认证攻击者可以通过上传特制文件以 root 身份执行任意命令。 技术细节 字段| 值 ---|--- CVE|...

CVE-2026-20127

CVE-2026-20127 概述 针对 Cisco Catalyst SD-WAN Controller 认证绕过漏洞 CVE-2026-20127 的漏洞利用程序。 该漏洞利用程序针对 vbondprocchallengeackack 处理器。它发送一条伪造的 CHALLENGEACKACK 消息（msgtype=10），其中包含攻击者控制的 verifystatus=1 字节，直接强制服务器在对端条目上设置 authenticated=1。 工作原理 在正常的 DTLS 控制平面握手过程中： 1. 客户端通过 DTLS 使用证书连接 2. 服务器发送...

CVE-2026-20131-POC

CVE-2026-20131---Cisco-SD-WAN-Preauth-RCE Cisco SD-WAN 零日漏洞 CVE-2026-20131 自 2023 年起被利用以获取管理员访问权限。 本仓库包含针对 CVE-2026-20131 的可运行概念验证（PoC）漏洞利用代码。该漏洞是 Cisco Catalyst SD-WAN Controller（原 vSmart）和 Catalyst SD-WAN Manager（原 vManage）中的一个严重预认证漏洞，自 2023 年以来已在野外被积极利用。 该漏洞自 2023 年以来已在野外被积极利用。 被 Cisco...

CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Wednesday added a critical authentication bypass flaw impacting Cisco Catalyst SD-WAN Manager to its Known Exploited Vulnerabilities KEV, following reports of active exploitation. The vulnerability, tracked as CVE-2026-76504 CVSS...

CVE-2026-20224---XXE-Injection-en-Cisco-Catalyst-SD-WAN-Manager

CVE-2026-20224 - Cisco Catalyst SD-WAN Manager XXE インジェクション ⚠️ 免責事項 このツールは教育および研究目的にのみ使用されます このエクスプロイトは、書面による明示的な許可 を得たシステムにおいて、許可されたレッドチーム運用、侵入テスト、セキュリティ研究にのみ使用することを目的としています。許可されていない使用は違法であり、厳しく禁止されています。作者はこのツールの誤用について一切の責任を負いません。 自己責任で使用してください。 📋 説明 Cisco Catalyst SD-WAN Manager 旧 SD-WAN vManage...

The vulnerability of the application software interface of the Cisco Catalyst SD-WAN Manager allows a perpetrator to bypass existing security mechanisms and gain unauthorized access to protected information.

The vulnerability of the application software interface of the Cisco Catalyst SD-WAN Manager is related to improper handling of data with encoded URLs. Exploiting this vulnerability allows an attacker to bypass existing security mechanisms and gain unauthorized access to protected information by...

Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager

Attackers are exploiting a new critical zero-day flaw in Cisco Catalyst SD-WAN Manager, the system companies use to manage their Cisco SD-WAN networks, Cisco said in an advisory on September 30. The flaw, CVE-2026-76504 , could allow a remote attacker with no login access to use the Manager's API...

Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)

Overview On September 30, 2026, Cisco published a security advisory for CVE-2026-76504, a critical API authentication bypass vulnerability affecting Cisco Catalyst SD-WAN Manager. The vulnerability has a CVSSv3.1 score of 9.8 and results from improper handling of URL encoding CWE-177. An...

Kwetsbaarheid verholpen in Cisco Catalyst SD-WAN Manager

Cisco has identified a vulnerability in the Cisco Catalyst SD-WAN Manager. This vulnerability resides in an API of the Cisco Catalyst SD-WAN Manager. Due to improper handling of URI encoding, unauthorized malicious actors can circumvent authentication mechanisms. This allows malicious...

CVE-2026-76504

A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user. This vulnerability is due to improper handling of URI encoding in an HTTP request,...

CVE-2026-76504 Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability

A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user. This vulnerability is due to improper handling of URI encoding in an HTTP request,...

CVE-2026-76504

A critical authentication bypass vulnerability exists in the Cisco Catalyst SD-WAN Manager API session-based authentication management. The root cause is improper handling of URI encoding (CWE-177) in HTTP requests, allowing an unauthenticated, remote attacker to bypass authentication rules and g...

EUVD-2026-89950

A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user. This vulnerability is due to improper handling of URI encoding in an HTTP request,...

CVE-2026-76504 Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability

A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user. This vulnerability is due to improper handling of URI encoding in an HTTP request,...

Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability

A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user. This vulnerability is due to improper handling of URI encoding in an HTTP request,...

CISA Adds One Known Exploited Vulnerability to Catalog  

CISA has added one new vulnerability to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-76504link is external Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber...

CVE-2026-76504

creationtimestamp| type| source ---|---|--- 2026-09-30 11:42:55+00:00| seen| https://www.acn.gov.it/portale/w/cisco-rilevato-sfruttamento-in-rete-di-una-vulnerabilita-in-catalyst-sd-wan-manager 2026-09-30 12:46:40+00:00| seen|...