API Authentication Bypass Vulnerability in Cisco Catalyst SD-WAN Manager

CVE-2026-76504

What is CVE-2026-76504?

A vulnerability has been identified in the API session-based authentication management of Cisco Catalyst SD-WAN Manager, which could permit an unauthenticated remote attacker to gain access to the affected system as an admin user. This issue arises from improper URI encoding handling within an HTTP request, allowing the attacker to circumvent authentication measures intended to protect specific API endpoints. By crafting a specially modified HTTP request directed at the API, an attacker can exploit this flaw, potentially leading to unauthorized administrative access.

References