Cisco SD-WAN Zero-Day Vulnerability Actively Exploited

A critical zero-day vulnerability in Cisco Catalyst SD-WAN, identified as CVE-2026-20245, is currently being actively exploited. This high-severity flaw enables an authenticated local attacker with specific privileges to execute arbitrary commands with elevated access. Reports indicate that the exploitation of this vulnerability began months before its public disclosure.