Mandiant Exposes Cisco SD-WAN Zero-Day Attacks' Root Access Methods

Cisco's SD-WAN system was exploited in active attacks using a high-severity flaw, allowing hackers to create a rogue root account and take full control of targeted devices. This vulnerability, tracked as CVE-2026-20245, was triggered through a simple tenant-upload feature in the command-line interface.

https://osintsights.com/mandiant-exposes-cisco-sd-wan-zero-day-attacks-root-access-methods?utm_source=mastodon&utm_medium=social

#CiscoSdwan #ZeroDay #Cve202620245 #CommandInjection #RootAccess