{"vulnerability": "cve-2026-76504", "sightings": [{"uuid": "ea3c32c3-d65f-4568-b51c-9c8d398eceb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mwqgcp36il24", "content": "Cisco Catalyst SD-WAN Manager CVE-2026-76504, CVSS 9.8: unauthenticated API bypass to admin, exploited in the wild per Cisco. No workaround. Upgrade to 20.9.10.1, 20.12.8.2, 20.15.6.1, 20.18.4.1, 26.1.2.1 or 26.2.1. https://cti.securitycyber.uk", "creation_timestamp": "2026-09-30T13:13:40.282937Z"}, {"uuid": "d82e9c6c-175f-4075-a1a4-85d8c4a50ad3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mwqgjzyjqi2r", "content": "\ud83d\udd34 EXPLOITED\n\nCVE-2026-76504: Cisco Catalyst SD-WAN Manager has a critical authentication bypass (CVSS 9.8) that lets an unauthenticated remote attacker gain admin-level API access. Cisco reports active exploitation in the wild. Update to a fixed release.", "creation_timestamp": "2026-09-30T13:17:47.040778Z"}, {"uuid": "ebb772f0-1b15-4f08-bae4-51504d2227b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwqjdik2gp2f", "content": "\ud83d\udea8 CVE-2026-76504 \u2014 CVSS 9.8 CRITICAL\n\nA vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could a...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76504\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-30T14:07:53.121459Z"}, {"uuid": "b90f2fcf-5c53-44c0-8120-69138b5971b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3mwqljkejjl2r", "content": "Cisco\u00a0released security updates to address a critical zero-day in the Catalyst SD-WAN Manager (tracked as\u00a0CVE-2026-76504) that attackers are actively exploiting to\u00a0escalate to admin privileges.", "creation_timestamp": "2026-09-30T14:47:02.917970Z"}, {"uuid": "151e909e-2d01-4523-bb9f-47423b54d1a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mwqn5w3rwy2x", "content": "Attackers exploit CVE-2026-76504, a 9.8 authentication bypass in Cisco SD-WAN Manager that grants admin API access. Patch now.\n\n#Cisco #SDWAN #CVE202676504 #AuthenticationBypass #ActivelyExploited #CyberSecurity", "creation_timestamp": "2026-09-30T15:16:17.041367Z"}, {"uuid": "d70303c4-7c01-456a-a45d-05718dcc4b37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/ikehjames25.bsky.social/post/3mwqokrbcvk2p", "content": "Cisco SD-WAN Manager Critical Flaw Actively Exploited (CVE-2026-76504)\n\nCisco has issued a critical warning regarding active exploitation of an authentication bypass vulnerability, CVE-2026-76504, in its Catalyst SD-WAN Manager. The flaw allows unauthenticated remote attackers to gain\u2026", "creation_timestamp": "2026-09-30T15:41:21.871201Z"}, {"uuid": "a36bb19d-e9dc-4055-a824-0b39b94dfd75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mwqopgwl272c", "content": "CVE-2026-76504 lets unauthenticated attackers use Cisco Catalyst SD-WAN Manager\u2019s API as admin via crafted URI encoding, requiring upgrades with no workaround.\n", "creation_timestamp": "2026-09-30T15:44:01.484985Z"}, {"uuid": "61fb4c3e-2afa-4620-b793-2f7c16b6198c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mwqoqsh26z2k", "content": "CVE-2026-76504 lets unauthenticated attackers use Cisco Catalyst SD-WAN Manager\u2019s API as admin via crafted URI encoding, requiring upgrades with no workaround.\n", "creation_timestamp": "2026-09-30T15:44:45.171443Z"}, {"uuid": "34e9b51c-5fd3-4bb8-93e9-09ed68031ce8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mwqos4zvwi24", "content": "CVE-2026-76504 lets unauthenticated attackers use Cisco Catalyst SD-WAN Manager\u2019s API as admin via crafted URI encoding, requiring upgrades with no workaround.\n", "creation_timestamp": "2026-09-30T15:45:34.011266Z"}, {"uuid": "63884acf-3b06-4cee-8b54-7cb0a8fefb61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://www.acn.gov.it/portale/w/cisco-rilevato-sfruttamento-in-rete-di-una-vulnerabilita-in-catalyst-sd-wan-manager", "content": "Cisco ha rilevato lo sfruttamento in rete di una vulnerabilit\u00e0 critica, identificata tramite la CVE-2026-76504, in Cisco Catalyst SD-WAN Manager, soluzione per la gestione di ambienti SD-WAN.", "creation_timestamp": "2026-09-30T11:42:55.000000Z"}, {"uuid": "e3145b51-8a14-4db8-b07f-e26d6d3522a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://www.bleepingcomputer.com/news/security/cisco-warns-of-new-sd-wan-authentication-bypass-zero-day-exploited-in-attacks/", "content": "Cisco\u00a0released security updates to address a critical zero-day in the Catalyst SD-WAN Manager (tracked as\u00a0CVE-2026-76504) that attackers are actively exploiting to\u00a0escalate to admin privileges. [...]", "creation_timestamp": "2026-09-30T12:46:40.000000Z"}, {"uuid": "5e57bf00-6c78-43d7-8e53-3b62294f0d76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/entorisec.bsky.social/post/3mwqpy5chpu22", "content": "Cisco confirms active exploitation of CVE-2026-76504, a CVSS 9.8 auth bypass in Catalyst SD-WAN Manager. A URI-encoding trick bypasses the admin API login check, no credentials needed. It's the fifth SD-WAN zero-day exploited this year. Patches are out, no workaround. bleepingcomputer.com/new...", "creation_timestamp": "2026-09-30T16:06:54.761330Z"}, {"uuid": "1c88bbd8-9c30-4d51-9a8a-1b220dc9293e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://gist.github.com/ichintu/b130d435953d44b507385ebed252960e", "content": "On September 30, 2026, cybersecurity advisories highlighted a surge of critical vulnerabilities across enterprise infrastructure, web platforms, and AI ecosystems. Key disclosures include an actively exploited authentication bypass in Cisco\u2019s Catalyst SD-WAN Manager (CVE-2026-76504), numerous critical flaws in WordPress plugins (SQL injection, RCE, and privilege escalation), and high-severity issues in MISP, Citrix NetScaler (compromising Dutch government systems), OpenSSL, and TeamViewer. The digest also flagged emerging AI supply-chain risks, including ChatGPT Custom GPT abuse for malware delivery and an arbitrary code execution flaw in Unsloth\u2019s model picker. Across all alerts, the urgent recommendation is immediate patching, strict configuration enforcement, and heightened monitoring of browser-based and trust-exploitation attack vectors.", "creation_timestamp": "2026-09-30T16:06:47.000000Z"}, {"uuid": "2ab84006-ce06-45d6-ac98-b6854b1761b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117360858430598633", "content": "New advisory, new flaw.\nCisco: CRITICAL CVE-2026-76504: Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-webauth-xr8beuuU @TalosSecurity #Cisco  \nAlso:\nBroadcom has several advisories today, three of them addressing critical vulnerabilities https://support.broadcom.com/web/ecx/security-advisory #Broadcom #infosec #vulnerability", "creation_timestamp": "2026-09-30T16:09:43.781903Z"}, {"uuid": "85af0d96-2538-48fb-9e6a-bb20d4b16807", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mwqrlphapx22", "content": "\ud83e\udd16 CVE-2026-76504 (CVSS 9.8): pre-auth auth bypass in Cisco Catalyst SD-WAN Manager. URI-encoding flaw in the login-session API lets unauthenticated attackers call the API as admin. Actively exploited, no workaround.\nhttps://thehackernews.com/2026/09/cisco-warns-of-attackers-exploiting.html", "creation_timestamp": "2026-09-30T16:35:39.162942Z"}, {"uuid": "1eb94266-e9f6-47bb-9e8f-4e48f4a5e386", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mwqs5gtqdv22", "content": "Cisco patched CVE-2026-76504, a critical zero-day in Catalyst SD-WAN Manager actively exploited to gain admin access via crafted HTTP requests and auth bypass. #Cisco #SDWAN #ZeroDay", "creation_timestamp": "2026-09-30T16:45:28.959083Z"}, {"uuid": "50a3b0e3-9a50-4a48-afd5-e0c84d6b3746", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mwqvdmwjkp2o", "content": "\ud83d\uded1 CVE-2026-76504\nCisco Catalyst SD-WAN Manager\nCVSS 9.8 / KEV: No\nTL;DR: A vulnerability in the API session-based authentication management of Cisco Catalyst SD\u2026\nhttps://cvesentinel.com/report/CVE-2026-76504?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-09-30T17:42:38.151536Z"}, {"uuid": "c21ebc43-083e-48b2-a7f0-22c2e6c24424", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f5bc2a87-dc34-47c6-ac53-71cf2a28f1ac", "content": "", "creation_timestamp": "2026-09-30T18:00:01.897425Z"}, {"uuid": "84a7afb8-0e02-45b7-b3eb-7c6bcd7d4aa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://t.me/thehackernews/10205", "content": "\u203c\ufe0f WARNING - Cisco says attackers are exploiting a critical SD-WAN Manager authentication bypass.\n\nCVE-2026-76504 lets a remote attacker access the Manager API as admin without credentials. Cisco has fixes, no workaround, and log checks for suspicious activity.\n\nRead: https://thehackernews.com/2026/09/cisco-warns-of-attackers-exploiting.html", "creation_timestamp": "2026-09-30T15:28:09.000000Z"}, {"uuid": "c2687b36-cc98-4ffd-97e1-bac07eed120c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mwqwg3gmt42s", "content": "Cisco Catalyst SD-WAN Manager\u306b\u3001\u7ba1\u7406\u8005\u6a29\u9650\u6607\u683c\u3092\u53ef\u80fd\u306b\u3059\u308b\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027\uff08CVE-2026-76504\uff09\u304c\u767a\u898b\u3055\u308c\u3001\u653b\u6483\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u307e\u3059\u3002", "creation_timestamp": "2026-09-30T18:01:54.728494Z"}, {"uuid": "1261d854-019c-4eb2-83fd-17e4f633ee60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/aipostdaily.bsky.social/post/3mwqxgkktnf2m", "content": "CISA added CVE-2026-76504 to its Known Exploited Vulnerabilities list (2026-09-30).\nCisco Catalyst SD-WAN Manager Hex Encoding\n#infosec #KEV", "creation_timestamp": "2026-09-30T18:20:04.684600Z"}, {"uuid": "1e392117-80ac-45fe-97c4-67cf51f499f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76504", "type": "seen", "source": "https://infosec.exchange/ap/users/115741367687413652/statuses/117361406235281992", "content": "Well would you look at that; it's Cisco 0-day o'clock again.\nhttps://ifin.network/t/cve-2026-76504-cisco-sd-wan-auth-bypass-actively-exploited/874\n#ThreatIntel #ThreatIntelligence #IFIN", "creation_timestamp": "2026-09-30T18:30:47.372710Z"}, {"uuid": "2c14cf7f-9cd6-4a46-b877-f4df07606e73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/117361427861570548", "content": "\ud83d\udea8 Cisco warns critical SD-WAN Manager zero-day is actively exploited\nCVE-2026-76504 is a critical authentication bypass affecting Cisco Catalyst SD-WAN Manager.\nThe flaw allows an unauthenticated remote attacker to send a crafted HTTP request that bypasses an API authentication rule and grants access with admin privileges.\u2800The vulnerability carries a CVSS score of 9.8 and affects the product regardless of its configuration.\nCisco became aware of active exploitation in September after investigating a support case.\u2800There are no workarounds. Administrators should install a fixed release immediately and investigate internet-facing systems for signs of compromise.\nSource: https://www.bleepingcomputer.com/news/security/cisco-warns-of-new-sd-wan-authentication-bypass-zero-day-exploited-in-attacks/", "creation_timestamp": "2026-09-30T18:34:32.611098Z"}, {"uuid": "df8f976c-597c-4dce-95ed-c1e1eb85f563", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76504", "type": "seen", "source": "https://bsky.app/profile/planetbriefing.bsky.social/post/3mwqyg425pv23", "content": "CVE-2026-76504: Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability\n\nCisco Catalyst SD-WAN Manager contains a hex encoding vulnerability that cou\u2026\n\nhttps://planetbriefing.com/events/cve-2026-76504-cisco-catalyst-sd-wan-manager-hex-encoding-vulnerability-e748ceab6714\n\n#Technology #UnitedStates", "creation_timestamp": "2026-09-30T18:37:44.000009Z"}, {"uuid": "e701d22c-7770-435b-a046-526791e03918", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "exploited", "source": "https://t.me/thehackernews/10205", "content": "\u203c\ufe0f WARNING - Cisco says attackers are exploiting a critical SD-WAN Manager authentication bypass.\n\nCVE-2026-76504 lets a remote attacker access the Manager API as admin without credentials. Cisco has fixes, no workaround, and log checks for suspicious activity.\n\nRead: https://thehackernews.com/2026/09/cisco-warns-of-attackers-exploiting.html", "creation_timestamp": "2026-09-30T15:28:09.000000Z"}, {"uuid": "a6d80764-50df-403b-b9cd-a3c958537d58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/secdb.bsky.social/post/3mwqzoffbv52y", "content": "\ud83d\udea8 CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0930)\n\n\u26a0\ufe0f CVE-2026-76504 - Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability\n\n\n#ZEN #SecDB #InfoSec #CISA_KEV", "creation_timestamp": "2026-09-30T19:00:16.004690Z"}, {"uuid": "3d81414e-19fc-464e-8789-a7ca6e872076", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://thehackernews.com/2026/09/cisco-warns-of-attackers-exploiting.html", "content": "Attackers are exploiting a new critical zero-day flaw in Cisco Catalyst SD-WAN Manager, the system companies use to manage their Cisco SD-WAN networks, Cisco said in an advisory on September 30.\n\nThe flaw, CVE-2026-76504, could allow a remote attacker with no login access to use the Manager's API as the admin user. Fixed releases are available, and there is no workaround. It carries a", "creation_timestamp": "2026-09-30T13:24:54.000000Z"}, {"uuid": "72c85696-42c5-4623-b510-90040630fa64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mwr6rwfqjz2r", "content": "Cisco warns of active exploitation of CVE-2026-76504 in Catalyst SD-WAN Manager, a critical auth bypass that lets remote unauthenticated attackers access the API as admin. 3 hashtags: #Cisco #SDWAN #CVE202676504", "creation_timestamp": "2026-09-30T20:31:42.134907Z"}, {"uuid": "0949b005-effb-42ad-ace8-8c4ee447832d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "Telegram/zpVK_evOMfTjGViaq7O0fPrN-cyP4Due_vpD-D7lUZJ5ZxI", "content": "", "creation_timestamp": "2026-09-30T17:44:45.000000Z"}, {"uuid": "e33df2c8-510d-4bc1-bc69-fa17e69bca33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "exploited", "source": "Telegram/zpVK_evOMfTjGViaq7O0fPrN-cyP4Due_vpD-D7lUZJ5ZxI", "content": "", "creation_timestamp": "2026-09-30T17:44:45.000000Z"}, {"uuid": "5bbbbc8a-cf12-4b37-afb0-21f53537c66a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "exploited", "source": "https://t.me/VulnerabilityNews/44684", "content": "Cisco warns of new SD-WAN zero-day exploited in attacks\n\nCisco\u00a0released security updates to address a critical zero-day in the Catalyst SD-WAN Manager (tracked as\u00a0CVE-2026-76504) that attackers are actively exploiting to\u00a0escalate to admin privileges. [...]\nhttps://www.bleepingcomputer.com/news/security/cisco-warns-of-new-sd-wan-authentication-bypass-zero-day-exploited-in-attacks/", "creation_timestamp": "2026-09-30T23:00:38.000000Z"}, {"uuid": "7943fd73-59d8-45da-89b0-9d5e547973a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/alien-rick.bsky.social/post/3mwrm2sb55c2s", "content": "Science tip. Cisco SD-WAN Manager treats /%6a_security_check like a VIP badge. CVE-2026-76504, CVSS 9.8, unauth admin API, already wild. CISA wants federal boxes patched by Oct 3. Morty, your WAN is now a polite suggestion. day274.009", "creation_timestamp": "2026-10-01T00:29:19.874879Z"}, {"uuid": "deaf2dcb-4802-4ede-b110-4fe0e36037bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mwrmrh57nj2r", "content": "\ud83e\udd16 CVE-2026-76504: critical auth bypass in Cisco Catalyst SD-WAN Manager. Unauthenticated attacker can call the Manager API as admin. Actively exploited, no workaround.\nhttps://thehackernews.com/2026/09/cisco-warns-of-attackers-exploiting.html", "creation_timestamp": "2026-10-01T00:41:57.729170Z"}, {"uuid": "1851e95f-f083-4f28-8343-ce3611334f2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/alien-rick.bsky.social/post/3mwrpjiezxc2q", "content": "Science tip. Cisco SD-WAN Manager treats /%6a_security_check like a VIP badge. CVE-2026-76504, CVSS 9.8, unauth admin API, already wild. CISA wants federal boxes patched by Oct 3. Morty, your WAN is now a polite suggestion. day274.009", "creation_timestamp": "2026-10-01T01:31:14.251022Z"}, {"uuid": "cd099e1f-d385-447d-8ce2-09f6e3192368", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mwrrjpfqlk2s", "content": "\ud83d\udccc CVE-2026-76504 - A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to... https://www.cyberhub.blog/cves/CVE-2026-76504", "creation_timestamp": "2026-10-01T02:07:07.132867Z"}, {"uuid": "508f7fb9-df30-47ec-bd3a-2ef04b5bd7de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/judgement-bot.bsky.social/post/3mwrrwqajxz2s", "content": "Cisco disclosed a severe CVSS 9.8 authentication bypass vulnerability (CVE-2026-76504) in its Catalyst SD-WAN Manager, prompting emergency patching across all release trains.", "creation_timestamp": "2026-10-01T02:14:23.523128Z"}, {"uuid": "6dc30ce1-d114-4dd7-bb59-98773a7652ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mwrt5nxdui2n", "content": "CISA\u304c\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\u30921\u4ef6\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0 #CISA (Sep 30)\n\nCVE-2026-76504 Cisco Catalyst SD-WAN Manager\u306e16\u9032\u6570\u30a8\u30f3\u30b3\u30fc\u30c7\u30a3\u30f3\u30b0\u306e\u8106\u5f31\u6027 \n\nwww.cisa.gov/news-events/...", "creation_timestamp": "2026-10-01T02:36:09.965079Z"}, {"uuid": "f4831adc-2d2f-47ce-b21d-188f8685dcc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mwrti77u5j2o", "content": "Cisco SD-WAN Manager CVE-2026-76504: Critical Auth Bypass Exploited in the Wild\uff08Cisco SD-WAN Manager\u306e\u91cd\u5927\u306a\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u8106\u5f31\u6027CVE-2026-76504\u304c\u5b9f\u60aa\u7528\uff09 #SecurityOnline (Sep 30)\nsecurityonline.info/cisco-sd-wan...", "creation_timestamp": "2026-10-01T02:42:03.657236Z"}, {"uuid": "1ddfe54b-dd7b-461c-9537-343e143ba901", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mwrxvfnfzu2j", "content": "~Cisa~\nCISA reports active exploitation of a Cisco Catalyst SD-WAN Manager hex encoding vulnerability; prioritize remediation.\n-\nIOCs: CVE-2026-76504\n-\n#CVE202676504 #Cisco #ThreatIntel", "creation_timestamp": "2026-10-01T04:01:01.384570Z"}, {"uuid": "ed0f1288-04ba-4285-aae1-799edc4a0e44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/theperimetersite.bsky.social/post/3mwsb7pxdh72f", "content": "CISA added CVE-2026-76504 to its Known Exploited Vulnerabilities list yesterday. If you're running Cisco Catalyst SD-WAN Managers, you've got a problem.\n\n#ransomware #vulnerability #infosec", "creation_timestamp": "2026-10-01T06:47:51.562903Z"}, {"uuid": "47ab69cd-1308-48c7-8c1e-99dfe15ff2a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://t.me/cyberbannews_ir/23821", "content": "\u2666\ufe0f \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062c\u062f\u06cc\u062f \u062f\u0631 \u0633\u0627\u0645\u0627\u0646\u0647 \u0645\u062f\u06cc\u0631\u06cc\u062a SD-WAN \u0633\u06cc\u0633\u06a9\u0648 \u06a9\u0634\u0641 \u0634\u062f\n\n\ud83d\udd3a \u0633\u06cc\u0633\u06a9\u0648 \u0627\u0632 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2026-76504 \u062f\u0631 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0634\u0628\u06a9\u0647 Catalyst SD-WAN Manager \u062e\u0628\u0631 \u062f\u0627\u062f\u061b \u0646\u0642\u0635\u06cc \u06a9\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0648\u0627\u0642\u0639\u06cc \u0627\u0632 \u0622\u0646 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f\u0647\u200c\u0627\u0646\u062f.\n\n\ud83d\udd3b \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u0628\u062f\u0648\u0646 \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0646\u0627\u0645 \u06a9\u0627\u0631\u0628\u0631\u06cc \u0648 \u0631\u0645\u0632 \u0639\u0628\u0648\u0631 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0648\u0627\u0631\u062f \u0633\u0627\u0645\u0627\u0646\u0647 \u0634\u0648\u062f \u0648 \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a\u06cc \u0628\u0647 \u062f\u0633\u062a \u0622\u0648\u0631\u062f.\n\n\ud83d\udd39 \u0633\u06cc\u0633\u06a9\u0648 \u0628\u0631\u0627\u06cc \u0631\u0641\u0639 \u0627\u06cc\u0646 \u0645\u0634\u06a9\u0644\u060c \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u062c\u062f\u06cc\u062f \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0631\u0627 \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f\u0647 \u0648 \u0627\u0632 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062e\u0648\u0627\u0633\u062a\u0647 \u0647\u0631\u0686\u0647 \u0633\u0631\u06cc\u0639\u200c\u062a\u0631 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u062e\u0648\u062f \u0631\u0627 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u0646\u062f.\n\n\ud83d\udd39 \u0622\u0698\u0627\u0646\u0633 \u0627\u0645\u0646\u06cc\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc \u0622\u0645\u0631\u06cc\u06a9\u0627 \u0646\u06cc\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u062f\u0631 \u0641\u0647\u0631\u0633\u062a \u0646\u0642\u0635\u200c\u0647\u0627\u06cc \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0641\u0639\u0627\u0644 \u0642\u0631\u0627\u0631 \u062f\u0627\u062f\u0647 \u0648 \u0627\u0632 \u0633\u0627\u0632\u0645\u0627\u0646\u200c\u0647\u0627\u06cc \u062f\u0648\u0644\u062a\u06cc \u062e\u0648\u0627\u0633\u062a\u0647 \u062a\u0627 \u06f3 \u0627\u06a9\u062a\u0628\u0631 \u0628\u0631\u0627\u06cc \u0631\u0641\u0639 \u0622\u0646 \u0627\u0642\u062f\u0627\u0645 \u06a9\u0646\u0646\u062f.\n\n#\u0627\u0645\u0646\u06cc\u062a_\u0633\u0627\u06cc\u0628\u0631\u06cc #\u0633\u06cc\u0633\u06a9\u0648 #\u0622\u0633\u06cc\u0628_\u067e\u0630\u06cc\u0631\u06cc\n\n\ud83d\udcc4\ud83d\udd0d @cyberbannews_ir", "creation_timestamp": "2026-10-01T07:19:17.000000Z"}, {"uuid": "cbd95b25-b16e-4843-9ff1-065eeaf12b3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3mwsfd2xupm2r", "content": "Cisco waarschuwt voor kritieke kwetsbaarheid in SD-WAN Manager die actief wordt \n\nCisco heeft op 30 september 2026 een advies uitgebracht over een kritieke kwetsbaarheid, geregistreerd als CVE-2026-76504, in Cisco Catalyst SD-WAN Manager. Deze kwetsbaarheid wordt momenteel actief uitgebuit d...", "creation_timestamp": "2026-10-01T08:01:19.886546Z"}, {"uuid": "05eb4178-dacc-4e13-bcbd-10d6a16dd555", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mwsgwi5ok325", "content": "\u30b7\u30b9\u30b3\u3001\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305fCatalyst SD-WAN\u306e\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027\u306b\u30d1\u30c3\u30c1\u3092\u516c\u958b\n\n\u30b7\u30b9\u30b3\u306f\u6c34\u66dc\u65e5\u3001Catalyst SD-WAN Manager\u306b\u5b58\u5728\u3057\u3001\u5b9f\u969b\u306e\u653b\u6483\u3067\u306e\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u3066\u3044\u308b\u91cd\u5927\u306a\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u306e\u8106\u5f31\u6027\u306b\u5bfe\u51e6\u3059\u308b\u7dca\u6025\u30d1\u30c3\u30c1\u3092\u516c\u958b\u3057\u307e\u3057\u305f\u3002 \u3053\u306e\u8106\u5f31\u6027\u306f\u300cCVE-2026-76504\u300d\uff08CVSS\u30b9\u30b3\u30a29.8\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u307e\u3059\u3002API\u306e\u30bb\u30c3\u30b7\u30e7\u30f3\u30d9\u30fc\u30b9\u8a8d\u8a3c\u30e1\u30ab\u30cb\u30ba\u30e0\u306b\u5f71\u97ff\u3057\u3001\u30ea\u30e2\u30fc\u30c8", "creation_timestamp": "2026-10-01T08:30:04.404808Z"}, {"uuid": "da7c3c19-6eb0-4ca7-891f-3a6245597a06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/ikehjames25.bsky.social/post/3mwsgygnuih2b", "content": "Cisco Patches Critical Catalyst SD-WAN Zero-Day Under Active\u00a0Exploitation\n\nCisco has issued urgent patches for a critical zero-day vulnerability (CVE-2026-76504) in its Catalyst SD-WAN Manager. The flaw, which allows remote, unauthenticated administrative access, is confirmed to be under active\u2026", "creation_timestamp": "2026-10-01T08:31:12.101701Z"}, {"uuid": "f590ac7e-9dac-4778-8b9f-fe6ebd9c408a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mwshrqyhv526", "content": "CVE-2026-76504 enables remote unauthenticated attackers to bypass authentication and gain admin access in Catalyst SD-WAN Manager via improper URI encoding.\n", "creation_timestamp": "2026-10-01T08:45:19.693215Z"}, {"uuid": "87860966-4a11-4004-b6c1-274bd9baba59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mwshtt73qc2l", "content": "CVE-2026-76504 enables remote unauthenticated attackers to bypass authentication and gain admin access in Catalyst SD-WAN Manager via improper URI encoding.\n", "creation_timestamp": "2026-10-01T08:46:28.960818Z"}, {"uuid": "3938900f-ff89-4d35-a47e-81427b4407d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mwshugf6yf2c", "content": "CVE-2026-76504 enables remote unauthenticated attackers to bypass authentication and gain admin access in Catalyst SD-WAN Manager via improper URI encoding.\n", "creation_timestamp": "2026-10-01T08:46:48.852192Z"}, {"uuid": "5c27e8e4-1e8b-4381-9e50-55c1d3e11457", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "exploited", "source": "https://t.me/cyberbannews_ir/23821", "content": "\u2666\ufe0f \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062c\u062f\u06cc\u062f \u062f\u0631 \u0633\u0627\u0645\u0627\u0646\u0647 \u0645\u062f\u06cc\u0631\u06cc\u062a SD-WAN \u0633\u06cc\u0633\u06a9\u0648 \u06a9\u0634\u0641 \u0634\u062f\n\n\ud83d\udd3a \u0633\u06cc\u0633\u06a9\u0648 \u0627\u0632 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2026-76504 \u062f\u0631 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0634\u0628\u06a9\u0647 Catalyst SD-WAN Manager \u062e\u0628\u0631 \u062f\u0627\u062f\u061b \u0646\u0642\u0635\u06cc \u06a9\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0648\u0627\u0642\u0639\u06cc \u0627\u0632 \u0622\u0646 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f\u0647\u200c\u0627\u0646\u062f.\n\n\ud83d\udd3b \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u0628\u062f\u0648\u0646 \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0646\u0627\u0645 \u06a9\u0627\u0631\u0628\u0631\u06cc \u0648 \u0631\u0645\u0632 \u0639\u0628\u0648\u0631 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0648\u0627\u0631\u062f \u0633\u0627\u0645\u0627\u0646\u0647 \u0634\u0648\u062f \u0648 \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a\u06cc \u0628\u0647 \u062f\u0633\u062a \u0622\u0648\u0631\u062f.\n\n\ud83d\udd39 \u0633\u06cc\u0633\u06a9\u0648 \u0628\u0631\u0627\u06cc \u0631\u0641\u0639 \u0627\u06cc\u0646 \u0645\u0634\u06a9\u0644\u060c \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u062c\u062f\u06cc\u062f \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0631\u0627 \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f\u0647 \u0648 \u0627\u0632 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062e\u0648\u0627\u0633\u062a\u0647 \u0647\u0631\u0686\u0647 \u0633\u0631\u06cc\u0639\u200c\u062a\u0631 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u062e\u0648\u062f \u0631\u0627 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u0646\u062f.\n\n\ud83d\udd39 \u0622\u0698\u0627\u0646\u0633 \u0627\u0645\u0646\u06cc\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc \u0622\u0645\u0631\u06cc\u06a9\u0627 \u0646\u06cc\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u062f\u0631 \u0641\u0647\u0631\u0633\u062a \u0646\u0642\u0635\u200c\u0647\u0627\u06cc \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0641\u0639\u0627\u0644 \u0642\u0631\u0627\u0631 \u062f\u0627\u062f\u0647 \u0648 \u0627\u0632 \u0633\u0627\u0632\u0645\u0627\u0646\u200c\u0647\u0627\u06cc \u062f\u0648\u0644\u062a\u06cc \u062e\u0648\u0627\u0633\u062a\u0647 \u062a\u0627 \u06f3 \u0627\u06a9\u062a\u0628\u0631 \u0628\u0631\u0627\u06cc \u0631\u0641\u0639 \u0622\u0646 \u0627\u0642\u062f\u0627\u0645 \u06a9\u0646\u0646\u062f.\n\n#\u0627\u0645\u0646\u06cc\u062a_\u0633\u0627\u06cc\u0628\u0631\u06cc #\u0633\u06cc\u0633\u06a9\u0648 #\u0622\u0633\u06cc\u0628_\u067e\u0630\u06cc\u0631\u06cc\n\n\ud83d\udcc4\ud83d\udd0d @cyberbannews_ir", "creation_timestamp": "2026-10-01T07:19:17.000000Z"}, {"uuid": "0b6a20c6-8c11-4cff-a35c-e8ec316718b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76504", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mwsj2fzbkg2o", "content": "\ud83d\udcf0 Cisco Peringatkan Zero-Day SD-WAN yang Dieksploitasi untuk Ambil Alih Akses Admin\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/10/01/cisco-sd-wan-zero-day-cve-2026-76504/\n\n#cisa #cisco #ciscoCatalystSd-wan #cve #cybersecurity #exploit #keamananSiber #kev #sd-wan #vmanage #vuln", "creation_timestamp": "2026-10-01T09:08:03.057247Z"}, {"uuid": "1c358da0-6e65-4af3-9f32-b41edc7a2c41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-f68356c9-b7548f0b25733253", "content": "U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Cisco Catalyst SD-WAN Manager flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Cisco Catalyst SD-WAN Manager flaw, tracked as CVE-2026-76504 (CVSS score of 9.8), to its Known Exploited Vulnerabilities (KEV) catalog. The vulnerability resides in Cisco Catalyst SD-WAN Manager\u2019s [\u2026]U.S. CISA adds Cisco Catalyst SD-WAN Manager flaw to its Known Exploited Vulnerabilities catalog", "creation_timestamp": "2026-10-01T09:15:46.450296Z"}, {"uuid": "cad7fab3-75e8-43ee-aaf1-fb501ad4d48c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3mwsjidqx6m62", "content": "U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Cisco Catalyst SD-WAN Manager flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Cisco Catalyst SD-WAN Manager flaw, tracked as CVE-2026-76504 (CVSS score [\u2026]", "creation_timestamp": "2026-10-01T09:15:54.214188Z"}, {"uuid": "7fd8d75b-1e9b-437c-907c-bd71ad7a2864", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mwslc4i5722m", "content": "On September 30, 2026, Cisco disclosed CVE-2026-76504, a critical API authentication bypass vulnerability in Cisco Catalyst SD-WAN Manager, with a CVSS score of 9.8. It allows unauthenticated remote attackers to bypass authentication and access the API as an admin.", "creation_timestamp": "2026-10-01T09:48:09.143427Z"}, {"uuid": "38a5bff0-b5fc-4047-85c5-77be983b7bb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mwsnbphuic2w", "content": "New Cisco SD-WAN zero-day exploited in-the-wild (CVE-2026-76504)\n\n\ud83d\udcd6 Read more: www.helpnetsecurity.com/2026/10/01/n...\n\n#cybersecurity #cybersecuritynews #0day #exploit @cisco.com", "creation_timestamp": "2026-10-01T10:23:45.312879Z"}, {"uuid": "07fe384e-e902-437f-9ea7-81b896d09c34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mwsnx2wrxz2l", "content": "Cisco SD-WAN\u306e\u65b0\u305f\u306a\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u308b\uff08CVE-2026-76504\uff09\n\nCisco\u306f\u3001\u540c\u793e\u306eSD-WAN\u30bd\u30ea\u30e5\u30fc\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\uff08CVE-2026-76504\uff09\u304c\u30bc\u30ed\u30c7\u30a4\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u305f\u3053\u3068\u3092\u660e\u3089\u304b\u306b\u3057\u307e\u3057\u305f\u3002\u540c\u88fd\u54c1\u3067\u30bc\u30ed\u30c7\u30a4\u653b\u6483\u304c\u78ba\u8a8d\u3055\u308c\u305f\u306e\u306f\u3001\u4eca\u5e74\u306b\u5165\u3063\u30665\u4ef6\u76ee\u3067\u3059\u3002 \u540c\u793e\u306e\u30a4\u30f3\u30b7\u30c7\u30f3\u30c8\u5bfe\u5fdc\u30c1\u30fc\u30e0\u304c\u3053\u306e\u8106\u5f31\u6027\u306e\u60aa\u7528\u3092\u628a\u63e1\u3057\u305f\u306e\u306f\u30012026\u5e749\u6708\u3067\u3059\u3002Cisco Tech", "creation_timestamp": "2026-10-01T10:35:40.187853Z"}, {"uuid": "539717b4-15c4-4ca3-9f3a-13841481914c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76504", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mwsoi66fmt2v", "content": "Cisco SD-WAN Manager auth bypass (CVE-2026-76504, CVSS 9.8) is under active exploitation. Federal agencies have until Oct\u2026 https://0daynews.com/articles/2026-10-01-cisco-sd-wan-manager-cve-2026-76504-exploited/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-4080", "creation_timestamp": "2026-10-01T10:45:14.248294Z"}, {"uuid": "d3e2d7a0-ad67-4b5e-af48-21d4c27caa93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://t.me/BleepingComputer/25693", "content": "\u200aCisco warns of new SD-WAN zero-day exploited in attacks\n\nCisco\u00a0released security updates to address a critical zero-day in the Catalyst SD-WAN Manager (tracked as\u00a0CVE-2026-76504) that attackers are actively exploiting to\u00a0escalate to admin privileges. [...]\n\nhttps://www.bleepingcomputer.com/news/security/cisco-warns-of-new-sd-wan-authentication-bypass-zero-day-exploited-in-attacks/", "creation_timestamp": "2026-09-30T15:17:54.000000Z"}, {"uuid": "2b7d7077-1da6-47e4-9a52-227eff2e3156", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://t.me/CyberDispatch/3170", "content": "Cisco says attackers are exploiting a critical SD-WAN Manager authentication bypass.\n\nCVE-2026-76504 lets a remote attacker access the Manager API as admin without credentials. Cisco has fixes, no workaround, and log checks for suspicious activity.", "creation_timestamp": "2026-10-01T04:51:35.000000Z"}, {"uuid": "ee76c035-66f4-4ff0-8872-3b5f7ae13a12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mwspgyqdy32l", "content": "Critical Threat Advisory: Cisco Catalyst SD-WAN Manager (CVE-2026-76504)\n\nThreat Advisory: CVE-2026-76504 Affected Vendor/Product: Cisco - Catalyst SD-WAN Manager Vulnerability Type (CWE): N/A Operational Threat Level:...", "creation_timestamp": "2026-10-01T11:02:28.069769Z"}, {"uuid": "1e98c6b2-c775-486a-871d-e7c641d3b15e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mwspngvs5c26", "content": "Critical Threat Advisory: Cisco Catalyst SD-WAN Manager (CVE-2026-76504)\n\nStrategic Threat Advisory: CVE-2026-76504 Affected Vendor & Product: Cisco - Catalyst SD-WAN Manager Vulnerability Class (CWE):...", "creation_timestamp": "2026-10-01T11:06:04.108471Z"}, {"uuid": "a5e87c0c-3fff-4d89-bcf7-bb550e204abc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mwsppy625k2c", "content": "New Cisco SD-WAN zero-day exploited in-the-wild (CVE-2026-76504)\n\nwww.helpnetsecurity.com/2026/10/01/n...\n\n#Kyberturvallisuus #Kyber #Tilannekuva", "creation_timestamp": "2026-10-01T11:07:30.651475Z"}, {"uuid": "fb5f4e76-f0e5-4ea2-86f4-b0e56dfd3b0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mwsq36f6ho2c", "content": "CVE-2026-76504 in Cisco Catalyst SD-WAN Manager enables unauthenticated remote attackers to bypass authentication and access the admin API via crafted HTTP requests.\n", "creation_timestamp": "2026-10-01T11:13:46.975094Z"}, {"uuid": "26630181-a203-4441-988d-ddef79946566", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mwspykhurl2m", "content": "CVE-2026-76504 in Cisco Catalyst SD-WAN Manager enables unauthenticated remote attackers to bypass authentication and access the admin API via crafted HTTP requests.\n", "creation_timestamp": "2026-10-01T11:12:18.224563Z"}, {"uuid": "3bfbe5a9-36aa-4aa7-9579-fb3d05b81fac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mwsq2kdzuc2i", "content": "CVE-2026-76504 in Cisco Catalyst SD-WAN Manager enables unauthenticated remote attackers to bypass authentication and access the admin API via crafted HTTP requests.\n", "creation_timestamp": "2026-10-01T11:13:24.489804Z"}, {"uuid": "82f4b65e-594e-4512-b625-2380a09aa5ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mwsq67mfzv2n", "content": "Cisco says CVE-2026-76504 is being exploited in zero-day attacks against Cisco Catalyst SD-WAN Manager, enabling API auth bypass and possible admin access. Fixes and IoCs are available. #Cisco #CVE202676504 #CISA", "creation_timestamp": "2026-10-01T11:15:27.068279Z"}, {"uuid": "ee8136c7-69a6-420f-891d-341df81e2dc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mwsq7wlpv224", "content": "Critical Threat Advisory: Cisco Catalyst SD-WAN Manager (CVE-2026-76504)\n\nCISA\u2019s active exploitation verification of CVE-2026-76504 demands an immediate, high-priority posture adjustment across all Cisco Catalyst SD-WAN Manager\u2026...", "creation_timestamp": "2026-10-01T11:16:24.760747Z"}, {"uuid": "34e88608-66e0-443a-84e7-b405fe0b6c4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/yasna.io/post/3mwsqzlmlee2z", "content": "A critical zero-day authentication bypass in Cisco Catalyst SD-WAN Manager (CVE-2026-76504) is actively exploited, prompting Cisco and CISA to issue alerts and fixes.\n\n#CVE #ZeroDay #infosec\n\nFull synthesis & sources: yasna.io", "creation_timestamp": "2026-10-01T11:30:45.860135Z"}, {"uuid": "7c744a5d-b2fc-4094-8c58-1a16a722302e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "exploited", "source": "https://t.me/CyberDispatch/3170", "content": "Cisco says attackers are exploiting a critical SD-WAN Manager authentication bypass.\n\nCVE-2026-76504 lets a remote attacker access the Manager API as admin without credentials. Cisco has fixes, no workaround, and log checks for suspicious activity.", "creation_timestamp": "2026-10-01T04:51:35.000000Z"}, {"uuid": "8dd1b94b-80db-4b44-9cc5-9b88cd3392d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "exploited", "source": "https://t.me/BleepingComputer/25693", "content": "\u200aCisco warns of new SD-WAN zero-day exploited in attacks\n\nCisco\u00a0released security updates to address a critical zero-day in the Catalyst SD-WAN Manager (tracked as\u00a0CVE-2026-76504) that attackers are actively exploiting to\u00a0escalate to admin privileges. [...]\n\nhttps://www.bleepingcomputer.com/news/security/cisco-warns-of-new-sd-wan-authentication-bypass-zero-day-exploited-in-attacks/", "creation_timestamp": "2026-09-30T15:17:54.000000Z"}, {"uuid": "d80dddf1-cd4f-48bb-8e7b-278983177f39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/cisco-security-advisory-av26-978", "content": "", "creation_timestamp": "2026-10-01T04:09:59.000000Z"}, {"uuid": "bc105d72-7673-4f50-900e-8833643ab8e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117365631624798728", "content": "We have just added an important vulnerability affecting Cisco Catalyst SD-WAN Manager (CVE-2026-76504) https://vuldb.com/vuln/412025", "creation_timestamp": "2026-10-01T12:23:36.603596Z"}, {"uuid": "cc71a1b5-4136-47c0-a92d-aa2938d7f976", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mwsu7pu2ac2l", "content": "Critical Threat Advisory: Cisco Catalyst SD-WAN Manager (CVE-2026-76504)\n\nCISA\u2019s active exploitation verification of CVE-2026-76504 demands an immediate, high-priority posture adjustment across all Cisco Catalyst SD-WAN Manager\u2026...", "creation_timestamp": "2026-10-01T12:27:52.606906Z"}, {"uuid": "07a0fc83-8f13-4408-9ccf-8dd7972482a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mwsvnq7axi2y", "content": "\ud83e\udd16 CVE-2026-76504 (CVSS 9.8): critical auth bypass in Cisco Catalyst SD-WAN Manager, actively exploited. CISA added it to KEV. Unauthenticated remote access to affected systems \u2014 patch now.\nhttps://thehackernews.com/2026/10/cisa-adds-exploited-cisco-catalyst-sd.html", "creation_timestamp": "2026-10-01T12:53:36.655251Z"}, {"uuid": "ebadad4f-6c66-4d7d-ad25-2a6edf93187d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mwsvwm272c25", "content": "Cisco warns of new SD-WAN zero-day exploited in attacks\n\nCisco\u00a0released security updates to address a critical zero-day in the Catalyst SD-WAN Manager (tracked as\u00a0CVE-2026-76504) that attackers are actively exploiting to\u00a0escalate to admin privileges. [...]\n#hackernews #news", "creation_timestamp": "2026-10-01T12:58:36.070410Z"}, {"uuid": "d6738bfe-11ea-494d-992f-b0200d4e6ee8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://t.me/thehackernews/10214", "content": "\ud83d\uded1 An actively exploited Cisco SD-WAN flaw can give unauthenticated attackers admin-level API access.\n\nCISA has added CVE-2026-76504 to its KEV catalog. Federal agencies have until Oct. 3 to apply the fix.\n\nWhat defenders should hunt for: https://thehackernews.com/2026/10/cisa-adds-exploited-cisco-catalyst-sd.html", "creation_timestamp": "2026-10-01T10:34:41.000000Z"}, {"uuid": "8a901d36-cc57-4a86-b1d9-dc1bb03ec8db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mwswu5kies2k", "content": "\ud83d\udd17 CVE : CVE-2026-76504", "creation_timestamp": "2026-10-01T13:15:05.366204Z"}, {"uuid": "9d5eb91c-4e09-4916-92fe-cc149b000e17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mwsxnsutla2l", "content": "CVE-2026-76504 is trending. Hype score 3, currently #7 on cvemon.\n\nA vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to access an affected system with\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-76504", "creation_timestamp": "2026-10-01T13:29:28.907633Z"}, {"uuid": "5caf92d5-50c7-408f-83c5-097b00810330", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/robcampbell.bsky.social/post/3mwsyonarfs2q", "content": "Cisco says attackers are exploiting CVE-2026-76504 to gain admin access to Catalyst SD-WAN Manager. No workaround exists. Patch now.\n\nsec.cloudapps.cisco.com/security/cen...\n#Cybersecurity #Cisco", "creation_timestamp": "2026-10-01T13:47:48.255974Z"}, {"uuid": "1e2e864b-d1e9-44e3-a2c1-b96318f44af5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://t.me/true_secator/8666", "content": "Cisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 0-day \u0432 Catalyst SD-WAN Manager (\u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u043a\u0430\u043a CVE-2026-76504), \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u0420\u0430\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0435 \u043a\u0430\u043a SD-WAN vManage, \u041f\u041e Catalyst SD-WAN Manager \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0434\u043e 6000 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438 SD-WAN \u0441 \u0435\u0434\u0438\u043d\u043e\u0439 \u043f\u0430\u043d\u0435\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u041a\u0430\u043a \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f, \u0432 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u0435 Cisco PSIRT \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u044d\u0442\u043e\u0439 CVE-2026-76504.\n\n\u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e \u043e\u0442 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0441\u0435\u0441\u0441\u0438\u0439 API \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u043a\u0438 URI \u0432 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u0435, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u043f\u0440\u043e\u0441\u0443 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0438\u043b\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u0435 \u0434\u043b\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 API.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441 \u043a API \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0422\u0430\u043a \u0438\u043b\u0438 \u0438\u043d\u0430\u0447\u0435, Cisco \u043f\u043e\u043a\u0430 \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c CVE-2026-76504, \u043d\u043e \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c IOCs, \u043e\u0442\u043c\u0435\u0447\u0430\u044f, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 %6a \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0432 URI \u0441\u0438\u043c\u0432\u043e\u043b\u0430 \"j\" \u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u0430\u0445.\n\n\u0422\u0430\u043a\u0436\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c serviceproxy-access.log, \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0439 \u0432 /var/log/nms/containers/service-proxy, \u0438 vmanage-server.log \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 /var/log/nms/ \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0437\u0430\u043f\u0438\u0441\u0435\u0439, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 j_security_check, \u043e\u0442 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0438\u043b\u0438 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 IP.\n\n\u0414\u043b\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0442\u043e\u0433\u043e, \u0431\u044b\u043b \u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d Cisco Catalyst SD-WAN Manager, \u043a\u043b\u0438\u0435\u043d\u0442\u044b \u043c\u043e\u0433\u0443\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c\u0441\u044f \u0432 \u0441\u043b\u0443\u0436\u0431\u0443 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 Cisco (TAC) \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438.\n\n\u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, CVE-2026-76504 - \u044d\u0442\u043e \u0443\u0436\u0435 \u043f\u044f\u0442\u0430\u044f 0-day \u0432 SD-WAN, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 \u0433\u043e\u0434\u0430. \u0421\u0435\u0433\u043e\u0434\u043d\u044f CISA \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u043e \u0435\u0435 \u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 KEV.\n\n\u0412\u043e\u043e\u0431\u0449\u0435 \u0436\u0435 \u0441 \u043d\u043e\u044f\u0431\u0440\u044f 2021 \u0433\u043e\u0434\u0430 \u0432 \u0440\u0435\u0435\u0441\u0442\u0440\u0435 CISA 90 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Cisco, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0447\u0435\u0442\u044b\u0440\u0435 \u0432 Cisco Catalyst SD-WAN Manager, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0441\u0435\u043c\u044c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0431\u0430\u043d\u0434\u0430\u043c\u0438 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439.", "creation_timestamp": "2026-10-01T09:46:21.000000Z"}, {"uuid": "1d519cc7-1152-4050-b0ff-e796123f750e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "exploited", "source": "https://t.me/thehackernews/10214", "content": "\ud83d\uded1 An actively exploited Cisco SD-WAN flaw can give unauthenticated attackers admin-level API access.\n\nCISA has added CVE-2026-76504 to its KEV catalog. Federal agencies have until Oct. 3 to apply the fix.\n\nWhat defenders should hunt for: https://thehackernews.com/2026/10/cisa-adds-exploited-cisco-catalyst-sd.html", "creation_timestamp": "2026-10-01T10:34:41.000000Z"}, {"uuid": "05fd4b8f-a2bd-43e0-8049-d049b7905387", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d5233a23-4682-413c-818a-709221feb653", "content": "", "creation_timestamp": "2026-10-01T14:00:38.047797Z"}, {"uuid": "00e55780-126a-4fbe-991e-f30eddda330b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "exploited", "source": "https://t.me/true_secator/8666", "content": "Cisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 0-day \u0432 Catalyst SD-WAN Manager (\u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u043a\u0430\u043a CVE-2026-76504), \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u0420\u0430\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0435 \u043a\u0430\u043a SD-WAN vManage, \u041f\u041e Catalyst SD-WAN Manager \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0434\u043e 6000 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438 SD-WAN \u0441 \u0435\u0434\u0438\u043d\u043e\u0439 \u043f\u0430\u043d\u0435\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u041a\u0430\u043a \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f, \u0432 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u0435 Cisco PSIRT \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u044d\u0442\u043e\u0439 CVE-2026-76504.\n\n\u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e \u043e\u0442 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0441\u0435\u0441\u0441\u0438\u0439 API \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u043a\u0438 URI \u0432 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u0435, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u043f\u0440\u043e\u0441\u0443 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0438\u043b\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u0435 \u0434\u043b\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 API.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441 \u043a API \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0422\u0430\u043a \u0438\u043b\u0438 \u0438\u043d\u0430\u0447\u0435, Cisco \u043f\u043e\u043a\u0430 \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c CVE-2026-76504, \u043d\u043e \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c IOCs, \u043e\u0442\u043c\u0435\u0447\u0430\u044f, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 %6a \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0432 URI \u0441\u0438\u043c\u0432\u043e\u043b\u0430 \"j\" \u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u0430\u0445.\n\n\u0422\u0430\u043a\u0436\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c serviceproxy-access.log, \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0439 \u0432 /var/log/nms/containers/service-proxy, \u0438 vmanage-server.log \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 /var/log/nms/ \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0437\u0430\u043f\u0438\u0441\u0435\u0439, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 j_security_check, \u043e\u0442 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0438\u043b\u0438 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 IP.\n\n\u0414\u043b\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0442\u043e\u0433\u043e, \u0431\u044b\u043b \u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d Cisco Catalyst SD-WAN Manager, \u043a\u043b\u0438\u0435\u043d\u0442\u044b \u043c\u043e\u0433\u0443\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c\u0441\u044f \u0432 \u0441\u043b\u0443\u0436\u0431\u0443 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 Cisco (TAC) \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438.\n\n\u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, CVE-2026-76504 - \u044d\u0442\u043e \u0443\u0436\u0435 \u043f\u044f\u0442\u0430\u044f 0-day \u0432 SD-WAN, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 \u0433\u043e\u0434\u0430. \u0421\u0435\u0433\u043e\u0434\u043d\u044f CISA \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u043e \u0435\u0435 \u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 KEV.\n\n\u0412\u043e\u043e\u0431\u0449\u0435 \u0436\u0435 \u0441 \u043d\u043e\u044f\u0431\u0440\u044f 2021 \u0433\u043e\u0434\u0430 \u0432 \u0440\u0435\u0435\u0441\u0442\u0440\u0435 CISA 90 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Cisco, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0447\u0435\u0442\u044b\u0440\u0435 \u0432 Cisco Catalyst SD-WAN Manager, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0441\u0435\u043c\u044c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0431\u0430\u043d\u0434\u0430\u043c\u0438 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439.", "creation_timestamp": "2026-10-01T09:46:21.000000Z"}, {"uuid": "a91636f5-bd32-4387-923b-25004a24ecf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76504", "type": "seen", "source": "https://bsky.app/profile/dannypalmer.bsky.social/post/3mwt5362wmk2r", "content": "New critical security vulnerability in Cisco Catalyst SD-WAN Manager just dropped. (CVE-2026-76504)\n\nCisco warned that attackers have already been seen using it in the wild...\n\nwww.infosecurity-magazine.com/news/critica...", "creation_timestamp": "2026-10-01T15:06:15.937725Z"}]}