{"total":2,"items":[{"id":237,"title":"Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability","original_title":"Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability","source_rating":null,"summary":"A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to access an affected system with privileges of…","ai":false,"actions":[],"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-webauth-xr8beuuU?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Catalyst%20SD-WAN%20Manager%20API%20Authentication%20Bypass%20Vulnerability%26vs_k=1","type":"advisory","language":"en","published_at":"2026-09-30T13:00:00+00:00","severity":"hoog","priority":55,"vendors":["Cisco"],"cves":[{"id":"CVE-2026-76504","cvss":9.8,"epss":null,"epss_percentile":null,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"kev_ransomware":false,"cvss_max":9.8,"epss_max":null,"source_count":2,"ncsc":null,"source":{"slug":"cisco-psirt","name":"Cisco PSIRT","category":"vendor","country":null,"license":"© Cisco","reuse":"excerpt"},"bundle":null},{"id":134,"title":"CVE-2026-76504: Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability","original_title":"CVE-2026-76504: Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability","source_rating":null,"summary":"Cisco Catalyst SD-WAN Manager contains a hex encoding vulnerability that could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user due to improper handling of URI encoding in an HTTP request.\n\nVereiste actie: Apply mitigations in accordance with vendor instructions, ","ai":false,"actions":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76504","type":"kev","language":"en","published_at":"2026-09-30T00:00:00+00:00","severity":"hoog","priority":55,"vendors":["Cisco"],"cves":[{"id":"CVE-2026-76504","cvss":9.8,"epss":null,"epss_percentile":null,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"kev_ransomware":false,"cvss_max":9.8,"epss_max":null,"source_count":2,"ncsc":null,"source":{"slug":"cisa-kev","name":"CISA Known Exploited Vulnerabilities","category":"vulnerability","country":"US","license":"Publiek domein (US-overheid)","reuse":"open"},"bundle":null}]}