{"id":250907,"date":"2026-05-15T07:15:00","date_gmt":"2026-05-15T11:15:00","guid":{"rendered":"https:\/\/news-you-need.com\/index.php\/2026\/05\/15\/cisco-discloses-yet-another-sd-wan-make-me-admin-0-day\/"},"modified":"2026-05-20T22:00:19","modified_gmt":"2026-05-21T02:00:19","slug":"cisco-discloses-yet-another-sd-wan-make-me-admin-0-day","status":"publish","type":"post","link":"https:\/\/news-you-need.com\/index.php\/2026\/05\/15\/cisco-discloses-yet-another-sd-wan-make-me-admin-0-day\/","title":{"rendered":"Cisco discloses yet another SD-WAN make-me-admin 0-day"},"content":{"rendered":"

Cisco discloses yet another SD-WAN make-me-admin 0-day<\/a><\/p>\n

https:\/\/www.theregister.com\/patches\/2026\/05\/15\/cisco-discloses-yet-another-sd-wan-make-me-admin-0-day\/5241071<\/a><\/p>\n

Publish Date: 2026-05-15 07:15:00<\/a><\/p>\n

Source Domain: www.theregister.com<\/a><\/p>\n

Patches<\/p>\n

CISA hands feds super-tight deadline for this perfect-10, actively exploited flaw<\/p>\n

Cisco admins face emergency patch duty after Switchzilla disclosed a max-severity make-me-admin bug affecting Catalyst SD-WAN Controller and Manager. <\/p>\n

Switchzilla dropped an advisory for CVE-2026-20182 (10.0) on Thursday, saying that both components, formerly known as vSmart and vManage, were vulnerable in all deployment types, and that fixes were available.<\/p>\n

The bug allows unauthenticated remote attackers to bypass authentication and gain admin privileges on an affected system.<\/p>\n

According to Rapid7, whose researchers Stephen Fewer and Jonah Burgess found the vulnerability, attackers exploiting CVE-2026-20182 could then start issuing arbitrary NETCONF commands.\u00a0<\/p>\n

It means they could steal data, intercept traffic, manipulate an organization’s firewall rules, or just bring the network down, opening up opportunities for attackers of all stripes:\u00a0state-backed,\u00a0financially motivated,\u00a0hacktivists\u00a0\u2013 you name it.<\/p>\n

Offering a high-level overview of the vulnerability, Cisco said: “This vulnerability exists because the peering authentication mechanism in an affected system is not working properly. An attacker could exploit this vulnerability by sending crafted requests to the affected system.\u00a0<\/p>\n

“A successful exploit could allow the attacker to log in to an affected Cisco Catalyst SD-WAN Controller as an internal, high-privileged, non-root user account. Using this account, the attacker could access NETCONF, which would then allow the attacker to manipulate network configuration for the SD-WAN fabric.”<\/p>\n

Cisco confirmed that, in May 2026, it became aware that CVE-2026-20182 had been exploited as a zero-day, although it did not attribute the activity. <\/p>\n

The Cybersecurity and Infrastructure Security Agency (CISA) also added CVE-2026-20182 to its Known Exploited Vulnerabilities (KEV) catalog, which is reserved for the security…<\/p>\n

Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Cisco discloses yet another SD-WAN make-me-admin 0-day https:\/\/www.theregister.com\/patches\/2026\/05\/15\/cisco-discloses-yet-another-sd-wan-make-me-admin-0-day\/5241071 Publish Date: 2026-05-15 07:15:00 Source Domain: www.theregister.com…<\/p>\n","protected":false},"author":1,"featured_media":250908,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/image.theregister.com\/4094206.jpg?imageId=4094206&x=0&y=0&cropw=100&croph=100&panox=0&panoy=0&panow=100&panoh=100&width=1200&height=683","fifu_image_alt":"","footnotes":""},"categories":[15],"tags":[24,31,27],"class_list":["post-250907","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-cybersecurity","tag-exploit","tag-vulnerability"],"_links":{"self":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/250907"}],"collection":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=250907"}],"version-history":[{"count":1,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/250907\/revisions"}],"predecessor-version":[{"id":250909,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/250907\/revisions\/250909"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/250908"}],"wp:attachment":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=250907"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=250907"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=250907"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}