Skip To Main Content
Avdaemon DbgMisc on Muck Rack

Avdaemon DbgMisc

Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work. Claim your profile

Get in touch with Avdaemon

Contact Avdaemon, search articles and posts on X, monitor coverage, and track replies from one place.

Learn more about Muck Rack

Actions

Share this page

Is this you?

As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile

Articles

CVE-2026-20182: Unauthenticated Cisco SD-WAN Control-Plane Compromise via vHub Authentication Bypass

|
By Byte Offset, Byte size, Avdaemon DbgMisc
| resecurity.com
Authentication Bypass Remote attackers can bypass SD-WAN authentication without valid credentials or trusted Cisco-issued certificates. Unauthorized Control-Plane Access Attackers can join the SD-WAN control plane as a trusted peer by abusing the vHub authentication path. Network Traffic Manipulation Malicious actors may modify routing behavior, redirect traffic, or manipulate WAN orchestration policies across the SD-WAN fabric.
Open in Who Shared Issue with article?

CVE-2026-20182: Critical authentication bypass in Cisco Catalyst SD-WAN Controller (FIXED)

|
By Byte Offset, Byte size, Avdaemon DbgMisc
| rapid7.com
March 9, 2026: Rapid7 makes initial outreach to Cisco who confirms contact the same day. Rapid7 discloses the technical writeup and exploit code to Cisco. March 11, 2026: Cisco confirms receipt of the technical writeup and exploit code and suggests a disclosure date of May 7, 2026. March 20, 2026: Cisco confirms the vulnerability findings, and that a CVE will be reserved. April 21, 2026: Cisco provides reserved CVE identifier and remediation guidance.
Open in Who Shared Issue with article?
See all 2 articles