<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>RuntimeRebel — #SD WAN</title><description>Cybersecurity articles tagged #SD WAN on RuntimeRebel.</description><link>https://runtimerebel.com</link><item><title>CVE-2026-20245: Zero-Day Root Privilege Escalation in Cisco SD-WAN</title><link>https://runtimerebel.com/blog/cve-2026-20245-zero-day-root-privilege-escalation-in-cisco-sd-wan</link><guid isPermaLink="true">https://runtimerebel.com/blog/cve-2026-20245-zero-day-root-privilege-escalation-in-cisco-sd-wan</guid><description>Attackers are exploiting a zero-day vulnerability in Cisco Catalyst SD-WAN Manager to gain root access. Learn how to detect and remediate CVE-2026-20245.</description><pubDate>Thu, 25 Jun 2026 09:21:26 GMT</pubDate><category>CVE-2026-20245</category><category>Cisco Catalyst</category><category>SD WAN</category><category>Zero-Day</category><category>Privilege Escalation</category></item><item><title>Cisco Catalyst SD-WAN CVE-2026-20245 Root Access Exploit Analysis</title><link>https://runtimerebel.com/blog/cisco-catalyst-sd-wan-cve-2026-20245-root-access-exploit-analysis</link><guid isPermaLink="true">https://runtimerebel.com/blog/cisco-catalyst-sd-wan-cve-2026-20245-root-access-exploit-analysis</guid><description>Exploitation of Cisco Catalyst SD-WAN zero-day CVE-2026-20245 allows root access. Mandiant reveals active abuse months prior to the June 2026 disclosure.</description><pubDate>Thu, 25 Jun 2026 09:13:27 GMT</pubDate><category>CVE-2026-20245</category><category>Cisco</category><category>SD WAN</category><category>Zero-Day</category><category>Mandiant</category><category>Privilege Escalation</category></item><item><title>Cisco Catalyst SD-WAN Manager CVE-2026-20262 Exploited in the Wild</title><link>https://runtimerebel.com/blog/cisco-catalyst-sd-wan-manager-cve-2026-20262-exploited-in-the-wild</link><guid isPermaLink="true">https://runtimerebel.com/blog/cisco-catalyst-sd-wan-manager-cve-2026-20262-exploited-in-the-wild</guid><description>Cisco patches an actively exploited medium-severity vulnerability in Catalyst SD-WAN Manager (CVE-2026-20262) that allows authenticated file creation.</description><pubDate>Tue, 16 Jun 2026 09:54:16 GMT</pubDate><category>CVE-2026-20262</category><category>Cisco</category><category>SD WAN</category><category>vManage</category></item><item><title>CVE-2026-20262: Cisco SD-WAN vManage Root Privilege Escalation Fix</title><link>https://runtimerebel.com/blog/cve-2026-20262-cisco-sd-wan-vmanage-root-privilege-escalation-fix</link><guid isPermaLink="true">https://runtimerebel.com/blog/cve-2026-20262-cisco-sd-wan-vmanage-root-privilege-escalation-fix</guid><description>Cisco patches CVE-2026-20262, a critical Zero-Day flaw in Catalyst SD-WAN Manager allowing authenticated attackers to escalate to root privileges.</description><pubDate>Mon, 15 Jun 2026 17:48:52 GMT</pubDate><category>CVE-2026-20262</category><category>Cisco</category><category>SD WAN</category><category>Privilege Escalation</category><category>Zero-Day</category></item><item><title>Cisco Catalyst SD-WAN Manager RCE via CVE-2024-20468 — Patch Now</title><link>https://runtimerebel.com/blog/cisco-catalyst-sd-wan-manager-rce-via-cve-2024-20468-patch-now</link><guid isPermaLink="true">https://runtimerebel.com/blog/cisco-catalyst-sd-wan-manager-rce-via-cve-2024-20468-patch-now</guid><description>Cisco warns of a high-severity zero-day vulnerability in Catalyst SD-WAN Manager, tracked as CVE-2024-20468, currently exploited for root privilege escalation.</description><pubDate>Fri, 05 Jun 2026 09:17:03 GMT</pubDate><category>Cisco</category><category>SD WAN</category><category>CVE-2024-20468</category><category>Privilege Escalation</category><category>Zero-Day</category></item><item><title>Cisco Catalyst SD-WAN Authentication Bypass: CVE-2026-20182 Exploit</title><link>https://runtimerebel.com/blog/cisco-catalyst-sd-wan-authentication-bypass-cve-2026-20182-exploit</link><guid isPermaLink="true">https://runtimerebel.com/blog/cisco-catalyst-sd-wan-authentication-bypass-cve-2026-20182-exploit</guid><description>CISA adds CVE-2026-20182 to its KEV catalog after reports of active exploitation against Cisco Catalyst SD-WAN Controllers. Critical patch required.</description><pubDate>Fri, 15 May 2026 09:11:50 GMT</pubDate><category>CVE-2026-20182</category><category>Cisco</category><category>SD WAN</category><category>CISA KEV</category><category>Authentication Bypass</category></item><item><title>Cisco Catalyst SD-WAN Controller Authentication Bypass via CVE-2026-20182 Exploited in Zero-Day Attacks</title><link>https://runtimerebel.com/blog/cisco-catalyst-sd-wan-controller-authentication-bypass-via-cve-2026-20182-exploited-in-zero-day-attacks</link><guid isPermaLink="true">https://runtimerebel.com/blog/cisco-catalyst-sd-wan-controller-authentication-bypass-via-cve-2026-20182-exploited-in-zero-day-attacks</guid><description>Cisco warns of a critical authentication bypass in Catalyst SD-WAN Controller (CVE-2026-20182) actively exploited in zero-day attacks, granting admin access.</description><pubDate>Thu, 14 May 2026 20:36:49 GMT</pubDate><category>Cisco Catalyst SD WAN Controller</category><category>CVE-2026-20182</category><category>Authentication Bypass</category><category>Zero-Day</category><category>SD WAN</category></item><item><title>CVE-2026-20182: Cisco SD-WAN Auth Bypass Actively Exploited</title><link>https://runtimerebel.com/blog/cve-2026-20182-cisco-sd-wan-auth-bypass-actively-exploited</link><guid isPermaLink="true">https://runtimerebel.com/blog/cve-2026-20182-cisco-sd-wan-auth-bypass-actively-exploited</guid><description>Cisco Catalyst SD-WAN Controller and Manager face critical authentication bypass CVE-2026-20182, actively exploited for admin access. Patch now.</description><pubDate>Thu, 14 May 2026 20:36:04 GMT</pubDate><category>CVE-2026-20182</category><category>Cisco Catalyst SD WAN Controller</category><category>Cisco Catalyst SD WAN Manager</category><category>Authentication Bypass</category><category>SD WAN</category><category>Network Security</category></item><item><title>Cisco Catalyst SD-WAN Manager Exploitation: Patch CVE-2024-20437 Now</title><link>https://runtimerebel.com/blog/cisco-catalyst-sd-wan-manager-exploitation-patch-cve-2024-20437-now</link><guid isPermaLink="true">https://runtimerebel.com/blog/cisco-catalyst-sd-wan-manager-exploitation-patch-cve-2024-20437-now</guid><description>Cisco confirms active exploitation of two high-severity flaws in Catalyst SD-WAN Manager, involving hardcoded credentials and authentication bypass.</description><pubDate>Thu, 05 Mar 2026 12:20:31 GMT</pubDate><category>Cisco</category><category>SD WAN</category><category>CVE-2024-20437</category><category>CVE-2024-20440</category><category>Exploitation</category></item><item><title>Cisco Catalyst SD-WAN Manager CVE-2023-20252 — Mitigation Guide</title><link>https://runtimerebel.com/blog/cisco-catalyst-sd-wan-manager-cve-2023-20252-mitigation-guide</link><guid isPermaLink="true">https://runtimerebel.com/blog/cisco-catalyst-sd-wan-manager-cve-2023-20252-mitigation-guide</guid><description>Cisco warns of active exploitation targeting Catalyst SD-WAN Manager vulnerabilities CVE-2023-20252 and CVE-2023-20253. Immediate patching is required.</description><pubDate>Thu, 05 Mar 2026 12:19:33 GMT</pubDate><category>Cisco</category><category>SD WAN</category><category>CVE-2023-20252</category><category>CVE-2023-20253</category><category>Active Exploitation</category></item><item><title>SD-WAN Zero-Day and Smart TV Proxy SDK Vulnerabilities Recap</title><link>https://runtimerebel.com/blog/sd-wan-zero-day-and-smart-tv-proxy-sdk-vulnerabilities-recap</link><guid isPermaLink="true">https://runtimerebel.com/blog/sd-wan-zero-day-and-smart-tv-proxy-sdk-vulnerabilities-recap</guid><description>Technical analysis of recent SD-WAN zero-day exploits and Smart TV proxy SDK risks, detailing how network infrastructure is increasingly targeted.</description><pubDate>Mon, 02 Mar 2026 16:17:18 GMT</pubDate><category>SD WAN</category><category>Zero-Day</category><category>Iot Security</category><category>Supply Chain</category><category>SDK Vulnerability</category></item><item><title>Cisco SD-WAN Zero-Day CVE-2026-20127 Exploited for Admin Access</title><link>https://runtimerebel.com/blog/cisco-sd-wan-zero-day-cve-2026-20127-exploited-for-admin-access</link><guid isPermaLink="true">https://runtimerebel.com/blog/cisco-sd-wan-zero-day-cve-2026-20127-exploited-for-admin-access</guid><description>CVE-2026-20127 is a critical CVSS 10.0 flaw in Cisco SD-WAN controllers exploited since 2023, allowing unauthenticated remote administrative access.</description><pubDate>Thu, 26 Feb 2026 08:18:56 GMT</pubDate><category>CVE-2026-20127</category><category>Cisco</category><category>SD WAN</category><category>vManage</category><category>vSmart</category><category>Zero-Day</category><category>Active Exploitation</category></item></channel></rss>