Cisco SD-WAN Zero-Day Vulnerability Actively Exploited

A critical zero-day privilege escalation vulnerability, identified as CVE-2026-20245, has been discovered in Cisco Catalyst SD-WAN Manager's command-line interface. Attackers are actively exploiting this flaw, which allows authenticated local users to execute arbitrary commands as root due to insufficient input validation. Cisco is currently working on a patch, but no workaround is available at this time, though exploitation appears limited.