Skip to content
Section C · The archive · Dispatch
← The archive

vulnerability · Sun 18 Oct 2026 · 10:23 UTC

CVE-2026-20245 Cisco Catalyst SD-WAN Manager CLI command injection. Local netadmin user uploads a crafted CSV to run commands as root. Exploited in the wild to create a rogue

Filed UTCSource BSK ↗

CVE-2026-20245 Cisco Catalyst SD-WAN Manager CLI command injection. Local netadmin user uploads a crafted CSV to run commands as root. Exploited in the wild to create a rogue "troot" root account plus anti-forensic cleanup. nvd.nist.gov/vuln/detail/...

Get the next one first.

Every dispatch goes to Telegram and RSS the moment it is published, and the whole wire is a keyless JSON API.

Check your stack

Paste what you run: the CVEs exploited in the wild against it, and who is cited as exploiting them, with the report.

Stack checkNo key. No signup.