#SD-WAN
All CosmicBytez Labs articles tagged #SD-WAN, across news, security advisories, how-to guides, and projects.
- News
Arista Urges Immediate Patching of Exploited VCO Zero-Day
Arista's VeloCloud Orchestrator has a critical zero-day (CVE-2026-93952, CVSS 10.0) under active attack; patch now or restrict web-interface access.
- News
New CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups
Arista disclosed CVE-2026-93952, a CVSS 10.0 pre-auth privilege escalation in VeloCloud Orchestrator, already under active exploitation.
- News
Arista Patches VeloCloud Orchestrator Zero-Day Exploited in Attacks
Arista Networks has released an emergency patch for a maximum-severity command injection zero-day in on-premises VeloCloud Orchestrator deployments that...
- News
Hackers Exploit Cisco SD-WAN Zero-Day for Root Access at Telecom Provider
Mandiant has detailed an incident in which threat actors exploited a Cisco SD-WAN zero-day vulnerability to gain the highest possible access level at a...
- Security
CVE-2026-20262: Cisco Catalyst SD-WAN Manager Path Traversal Vulnerability
Cisco Catalyst SD-WAN Manager contains a directory path traversal vulnerability allowing an authenticated remote attacker to create or overwrite any file...
- News
Cisco Customers Encounter Another SD-WAN Zero-Day Under Attack
A seventh actively exploited zero-day in Cisco SD-WAN products this year — CVE-2026-20245 — is under attack with no patch yet available from Cisco.
- News
Cisco Warns of Unpatched SD-WAN Zero-Day Exploited in Attacks
Cisco has issued an emergency warning about an actively exploited, unpatched zero-day in Cisco Catalyst SD-WAN Manager (CVE-2026-20245) that enables root…
- News
Cisco Catalyst SD-WAN Controller Auth Bypass Actively
Cisco has patched a maximum-severity authentication bypass flaw in its Catalyst SD-WAN Controller that has already been exploited in limited attacks....
- News
Cisco Patches Another SD-WAN Zero-Day, the Sixth Exploited
Cisco has patched CVE-2026-20182, a zero-day in Catalyst SD-WAN Manager that has been actively exploited in targeted attacks by sophisticated threat actor...
- Security
CVE-2026-20182: Cisco Catalyst SD-WAN Controller
A critical authentication bypass vulnerability in Cisco Catalyst SD-WAN Controller and Manager allows an unauthenticated remote attacker to bypass...
- HOWTO
Starlink and Cybersecurity: Securing Rural Connectivity in 2026
Starlink solved one rural problem and accidentally created another. Connection is fast — but the security defaults that worked for traditional ISP-managed…
- Security
CVE-2026-20122: Cisco Catalyst SD-WAN Manager Incorrect Use
Cisco Catalyst SD-WAN Manager contains a privileged API misuse vulnerability that allows an attacker to upload a malicious file to the local file system...
- Security
CISA Issues Emergency Directive as Cisco SD-WAN Zero-Day
A maximum-severity authentication bypass in Cisco Catalyst SD-WAN (CVE-2026-20127, CVSS 10.0) has been actively exploited by threat actor UAT-8616 since...
- Security
Cisco SD-WAN Zero-Day CVE-2026-20127 Triggers Five Eyes
A CVSS 10.0 authentication bypass in Cisco Catalyst SD-WAN has been exploited since at least 2023. CISA issues Emergency Directive ED 26-03 as all Five...
- HOWTO
FortiGate Performance Optimization: A Tuning Guide for Throughput
Optimize FortiGate performance with NP/CP offloading, session table tuning, UTM profile optimization, SD-WAN performance rules, conserve mode prevention,...
- Project
FortiGate SD-WAN Deployment
Deploy enterprise SD-WAN with FortiGate featuring dual ISP failover, performance SLAs, application steering, and Zero Trust architecture integration.
- Newsletter
Security Roundup & FortiGate Deep Dive - Issue #2
This week: FortiGate SD-WAN deployment, new CVEs affecting critical infrastructure, and Azure Sentinel implementation tips.