CVE-2026-20127 2

Vulnerability (CVE)

Inside Key Drift: Analyzing historical UAT-11473 activity on Cisco SD-WAN

Cyber Risks Cisco Talos Oct 28, 2026

Talos has identified UAT-11473, a highly sophisticated APT, who exploited CVE-2026-20127, an authentication bypass vulnerability in Cisco SD-WAN Catalyst Controller instances to bypass authentication and gain unauthorized access to affected systems to...

Data Breaches

CVE-2026-20127: Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Feb 25, 2026

Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, and Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, contain an authentication bypass vulnerability could allow an unauthenticated, remote attacker to bypass authentication and obtain...

Vulnerabilities & Patching