Tag: Gain Root Access

According to new research from Google-owned Mandiant, an unidentified threat actor used a recently revealed high-severity security issue affecting Cisco Catalyst SD-WAN as a zero-day at least two months prior to it being made public. The vulnerability, identified as CVE-2026-20245 (CVSS score: 7.8), exploits the device's inadequate validation of user-supplied input to enable an authorized, local attacker to execute arbitrary commands with elevated privileges by providing a forged file to the compromised system. Cisco said earlier this month that it became aware of the exploitation of this vulnerability and added that in order for an attack to be effective, a malicious actor needs to have netadmin capabilities on the compromised server. According to Mandiant researchers Chester Sn...