⚡ Weekly Recap: SD-WAN 0-Day, Critical CVEs, Telegram Probe, Smart TV Proxy SDK and More

Summary: A maximum-severity authentication bypass in Cisco Catalyst SD-WAN Controller and Manager, tracked as CVE-2026-20127 with a CVSS score of 10.0, has been exploited in the wild in activity dating back to 2023, letting an unauthenticated remote attacker gain administrative privileges via a crafted request. Cisco credited the Australian Signals Directorate's Australian Cyber Security Centre for reporting it and tracks the exploitation and post-compromise activity as UAT-8616, which it describes as a highly sophisticated cyber threat actor.
Key Takeaway: A 10.0 flaw in the controller layer of enterprise SD-WAN has been exploited since 2023 by an actor Cisco calls highly sophisticated, so the question is whether your network control plane has been sitting compromised for years rather than whether it needs patching now.

Read the original at The Hacker News ↗