Cisco Catalyst SD-WAN Zero-Day (CVE-2026-20127) Exploited by Sophisticated Threat Actor

Critical authentication bypass in Cisco Catalyst SD-WAN exploited by UAT-8616 threat actor. Chained with older vulnerability for privilege escalation. Added to CISA KEV catalog.

**Associated CVEs:** CVE-2026-20127, CVE-2022-20775

**Source:** https://www.securityweek.com/cisco-patches-catalyst-sd-wan-zero-day-exploited-by-highly-sophisticated-hackers/

**Recommended Actions:** - Apply security patches immediately if available - Monitor for indicators of compromise - Review and update security configurations - Implement network segmentation where applicable