Cisco SD-WAN Zero-Day Exploited for Three Years Before Patch, CISA Issues Emergency Directive
A maximum-severity authentication bypass in Cisco Catalyst SD-WAN has been actively exploited since 2023 by a sophisticated threat actor, prompting a CISA emergency directive requiring federal agencies to patch or disconnect affected systems.
4 min read4 sources