Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

CVE-2026-20127 – Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Overview & Takeaways

netspi.com | vulnerability | CVE-2026-20127 | #authentication-bypass | #network-security | #cisco | #cisa-kev | #cve-2026-20127 | #sd-wan

Summary

CVE-2026-20127 is a CVSS 10.0 authentication bypass in Cisco Catalyst SD-WAN Controller and Manager that lets unauthenticated attackers gain admin access; exploitation is confirmed in the wild.
CVE
CVE-2026-20127
Published
Collected

original ↗

Related coverage

vulnerability · bishopfox.com
[CVE-2026-67279] MikroTrick: Inside the RouterOS Takeover Chain
Bishop Fox reproduced the MikroTrick RouterOS takeover chain, using CVE-2026-67279 and a second flaw for unauthenticated admin access on 7.x, and confirmed real devices were already compromised.
blog · wiz.io
Cisco and Wiz Help Customers Modernize Cybersecurity
Cisco and Wiz deepen their collaboration, pairing Cisco's Hybrid Mesh Firewall with Wiz's Security Graph to cut attack surface and stop lateral movement through shared, context-driven security.
vulnerability · netspi.com
CVE-2025-26399 SolarWinds Web Help Desk Overview and Takeaways
CVE-2025-26399 is a critical unauthenticated deserialization flaw (CVSS 9.8) in SolarWinds Web Help Desk, a patch bypass now actively exploited and listed in CISA's KEV catalog.
vulnerability · bishopfox.com
CVE-2026-82329: Unauthenticated Administrative Access in JFrog Artifactory via an Empty Cluster Join Key
Bishop Fox on CVE-2026-82329: a default Artifactory cluster join key anyone can derive, so one forged join request mints an admin token — CVSS 9.8, KEV-listed, fixed in 7.111.21.
vulnerability · bishopfox.com
Mind the Config: Detecting and Weaponizing NetScaler CVE-2026-19490
Bishop Fox maps NetScaler CVE-2026-19490, a CVSS 9.3 SAML bypass: one request runs post-login code, impact ranges from crash to internal proxy to root, plus a safe patch-state checker.
Critical · vulnerability · bishopfox.com
Fortinet FortiWeb Authentication Bypass – CVE-2025-64446
Bishop Fox confirms CVE-2025-64446: one HTTP POST with a path traversal and crafted header creates an admin account on vulnerable FortiWeb builds, giving device takeover; CISA KEV listed.
back