Cisco patched a CVSS 10.0 authentication bypass zero-day in Catalyst SD-WAN Controller (CVE-2026-20182) that is actively exploited in the wild, with CISA adding it to the Known Exploited Vulnerabilities catalog and imposing a tight federal remediation deadline.
Security