Cisco discloses second actively exploited SD-WAN vulnerability

Cisco has announced a second actively exploited vulnerability in its Catalyst SD-WAN Manager within a two-week period. This flaw, identified as CVE-2026-20262, is being used by attackers to deploy malicious files and Java web applications. Federal agencies are mandated by CISA to address this critical security issue by June 29, 2026.