Claims: Cisco SD-WAN make-me-root bug under attack

These are attributed source records, not independent verification of each assertion.

Complete claim record (JSON) · Original source

1. title: Cisco SD-WAN make-me-root bug under attack (alleges; supported) Source
2. url: https://www.theregister.com/patches/2026/06/15/cisco-sd-wan-make-me-root-bug-under-attack/5255916 (alleges; supported) Source
3. summary: Cisco today issued a fix for a Catalyst SD-WAN Manager bug that attackers have already spotted and exploited to get root privileges, according to both the networking vendor and the feds. The vulnerability, tracked as CVE-2026-20262, is in the web UI of Cisco Catalyst SD-WAN Manager, and exists because the software is not properly validating user-supplied input during a file upload process. “An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected API endpoint… (alleges; supported) Source
4. published: Mon, 15 Jun 2026 23:48:25 +0200 (alleges; supported) Source