June 25, 2026
- Cisco Catalyst SD-WAN Manager zero-day CVE-2026-20245 was exploited in the wild against a service provider, with Mandiant detailing how a threat actor escalated from a compromised administrative account to root by uploading a malicious CSV through a file-upload feature that failed to filter the payload, then used anti-forensic log deletion to stay hidden. IOCs and remediation guidance are published. Google/Mandiant, BleepingComputer · Vulnerabilities & Exploits