Cisco and SonicWall Issue Emergency Patches for Critical Zero-Day Vulnerabilities

Cisco has released a fix for CVE-2026-76504, a critical authentication-bypass flaw in Catalyst SD-WAN Manager that was actively exploited. Separately, SonicWall issued hotfixes for CVE-2026-102255, a maximum-severity server-side request forgery (SSRF) bug in its SMA 1000 remote-access appliances, marking the second such flaw in five weeks for the product line. Both vulnerabilities have been added to CISA's Known Exploited Vulnerabilities catalog.