Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SW?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Catalyst%20SD-WAN%20Controller%20Authentication%20Bypass%20Vulnerability%26vs_k=1
May 2026: This security advisory provides the details and fix information for a vulnerability that was discovered and fixed after the Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability (https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa-EHchtZk) was disclosed in February 2026. This new advisory is for a new vulnerability in the control connection handshaking. The Indicators of Compromise (https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SW?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Catalyst%20SD-WAN%20Controller%20Authentication%20Bypass%20Vulnerability%26vs_k=1#IOC) section of this advisory includes Show Control Connections guidance to help with system checks.
A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, and Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected system.
This vulnerability exists because the peering authentication mechanism in an affected system is not working properly. An attacker could exploit this vulnerability by sending crafted requests to the affected system. A successful exploit could allow the attacker to log in to an affected Cisco Catalyst SD-WAN Controller as an internal, high-privileged, non-root user account. Using this account, the attacker could access NETCONF, which would then allow the attacker to manipulate network configuration for the SD-WAN fabric.
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
Important: To preserve possible indicators of compromise, customers should issue the request admin-tech command from each of the control components in the SD-WAN deployment before upgrading. After the admin-tech file has been collected, software should be upgraded at the earliest opportunity.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SW
Security Impact Rating: Critical
CVE: CVE-2026-20182
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SW?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Catalyst%20SD-WAN%20Controller%20Authentication%20Bypass%20Vulnerability%26vs_k=1
May 2026: This security advisory provides the details and fix information for a vulnerability that was discovered and fixed after the Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability (https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa-EHchtZk) was disclosed in February 2026. This new advisory is for a new vulnerability in the control connection handshaking. The Indicators of Compromise (https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SW?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Catalyst%20SD-WAN%20Controller%20Authentication%20Bypass%20Vulnerability%26vs_k=1#IOC) section of this advisory includes Show Control Connections guidance to help with system checks.
A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, and Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected system.
This vulnerability exists because the peering authentication mechanism in an affected system is not working properly. An attacker could exploit this vulnerability by sending crafted requests to the affected system. A successful exploit could allow the attacker to log in to an affected Cisco Catalyst SD-WAN Controller as an internal, high-privileged, non-root user account. Using this account, the attacker could access NETCONF, which would then allow the attacker to manipulate network configuration for the SD-WAN fabric.
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
Important: To preserve possible indicators of compromise, customers should issue the request admin-tech command from each of the control components in the SD-WAN deployment before upgrading. After the admin-tech file has been collected, software should be upgraded at the earliest opportunity.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SW
Security Impact Rating: Critical
CVE: CVE-2026-20182
Cisco Catalyst SD-WAN Manager Vulnerabilities
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-mltvnps2-JxpWm7R?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Catalyst%20SD-WAN%20Manager%20Vulnerabilities%26vs_k=1
Multiple vulnerabilities in Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow a remote attacker to gain access to sensitive information, elevate privileges, or gain unauthorized access to the application.
For more information about these vulnerabilities, see the Details (https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-mltvnps2-JxpWm7R?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Catalyst%20SD-WAN%20Manager%20Vulnerabilities%26vs_k=1#details) section of this advisory.
Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.
Cisco strongly recommends that customers upgrade to the fixed software indicated in this advisory.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-mltvnps2-JxpWm7R
Security Impact Rating: Critical
CVE: CVE-2026-20209,CVE-2026-20210,CVE-2026-20224
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-mltvnps2-JxpWm7R?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Catalyst%20SD-WAN%20Manager%20Vulnerabilities%26vs_k=1
Multiple vulnerabilities in Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow a remote attacker to gain access to sensitive information, elevate privileges, or gain unauthorized access to the application.
For more information about these vulnerabilities, see the Details (https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-mltvnps2-JxpWm7R?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Catalyst%20SD-WAN%20Manager%20Vulnerabilities%26vs_k=1#details) section of this advisory.
Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.
Cisco strongly recommends that customers upgrade to the fixed software indicated in this advisory.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-mltvnps2-JxpWm7R
Security Impact Rating: Critical
CVE: CVE-2026-20209,CVE-2026-20210,CVE-2026-20224
LG OLED G6 Series Review: Top-End TV Net Gain for Picture Quality
https://www.cnet.com/tech/home-entertainment/lg-oled-g6-series-review/
For movie fans, the G6 OLED is especially good, but it's up against some serious competition from the Samsung S95H.
https://www.cnet.com/tech/home-entertainment/lg-oled-g6-series-review/
For movie fans, the G6 OLED is especially good, but it's up against some serious competition from the Samsung S95H.
Why 'The Devil Wears Prada 2' is the Perfect Sequel video
https://www.cnet.com/videos/why-the-devil-wears-prada-2-is-the-perfect-sequel/
In an era of endless reboots and sequels, The Devil Wears Prada 2 managed to do the impossible: stay true to its roots while evolving for a new generation. In our latest episode of How It Hits, we take a look at the "legacy sequel" phenomenon through the lens of one of cinema's most stylish comedies. We break down the return of Meryl Streep, Anne Hathaway, Stanley Tucci, and Emily Blunt, and look at how the shift from print to digital journalism provides the perfect backdrop for the continued power struggle between Andy and Miranda. Groundbreaking? Actually, yes.
https://www.cnet.com/videos/why-the-devil-wears-prada-2-is-the-perfect-sequel/
In an era of endless reboots and sequels, The Devil Wears Prada 2 managed to do the impossible: stay true to its roots while evolving for a new generation. In our latest episode of How It Hits, we take a look at the "legacy sequel" phenomenon through the lens of one of cinema's most stylish comedies. We break down the return of Meryl Streep, Anne Hathaway, Stanley Tucci, and Emily Blunt, and look at how the shift from print to digital journalism provides the perfect backdrop for the continued power struggle between Andy and Miranda. Groundbreaking? Actually, yes.
How to Enable Xbox: Embrace the Gamepad on Your Gaming PC video
https://www.cnet.com/videos/xbox-mode-guide-embrace-the-gamepad-on-your-gaming-pc/
Microsoft finally bridged the gap between PC and console. From a unified game library to improved performance, here's how the new native Xbox Mode transforms your humdrum PC into the ultimate couch-gaming machine.
https://www.cnet.com/videos/xbox-mode-guide-embrace-the-gamepad-on-your-gaming-pc/
Microsoft finally bridged the gap between PC and console. From a unified game library to improved performance, here's how the new native Xbox Mode transforms your humdrum PC into the ultimate couch-gaming machine.
Cisco CEO Chuck Robbins: There’s a networking supercycle that we’re entering right now
https://newsroom.cisco.com/c/r/newsroom/en/us/a/y2026/m05/cisco-ceo-chuck-robbins-there-a-networking-supercycle-that-we-re-entering-right-now.html?source=rss
https://newsroom.cisco.com/c/r/newsroom/en/us/a/y2026/m05/cisco-ceo-chuck-robbins-there-a-networking-supercycle-that-we-re-entering-right-now.html?source=rss
Cisco Chair and CEO Chuck Robbins joins ‘Squawk on the Street’ to discuss the company’s quarterly earnings results, Silicon One strategy, the company’s AI investment, restructuring plan, growth outlook, and more.
More RSS Feeds: https://newsroom.cisco.com/c/r/newsroom/en/us/rss-feeds.html (https://newsroom.cisco.com/c/r/newsroom/en/us/rss-feeds.html?source=rss)
More RSS Feeds: https://newsroom.cisco.com/c/r/newsroom/en/us/rss-feeds.html (https://newsroom.cisco.com/c/r/newsroom/en/us/rss-feeds.html?source=rss)
The Fitbit Air's Bare-Bones Design Is Hiding a Much Bigger Strategy
https://www.cnet.com/tech/mobile/fitbit-air-google-coach-fitness-tracker-band-first-impressions/
Google's $99 screenless Whoop rival may get users in the door, but the company is betting AI coaching features will keep them coming back.
https://www.cnet.com/tech/mobile/fitbit-air-google-coach-fitness-tracker-band-first-impressions/
Google's $99 screenless Whoop rival may get users in the door, but the company is betting AI coaching features will keep them coming back.
Madonna, Shakira and BTS Teaming Up for FIFA World Cup Final Halftime Show
https://www.cnet.com/culture/sports/madonna-shakira-and-bts-teaming-up-for-fifa-world-cup-final-halftime-show/
You'll be able to watch the July event from home.
https://www.cnet.com/culture/sports/madonna-shakira-and-bts-teaming-up-for-fifa-world-cup-final-halftime-show/
You'll be able to watch the July event from home.
GTA 6: Preorder Rumors, Release Date, Pricing, Locations and More
https://www.cnet.com/tech/gaming/gta-6-release-date-pricing-location-and-more/
The next installment of the Grand Theft Auto series is poised to dominate 2026. Here's what we know so far.
https://www.cnet.com/tech/gaming/gta-6-release-date-pricing-location-and-more/
The next installment of the Grand Theft Auto series is poised to dominate 2026. Here's what we know so far.
Today's NYT Connections Hints, Answers and Help for May 15, #1069
https://www.cnet.com/tech/gaming/todays-nyt-connections-hints-answers-and-help-for-may-15-1069/
Here are some hints and the answers for the NYT Connections puzzle for May 15, No. 1,069.
https://www.cnet.com/tech/gaming/todays-nyt-connections-hints-answers-and-help-for-may-15-1069/
Here are some hints and the answers for the NYT Connections puzzle for May 15, No. 1,069.
Today's Wordle Hints, Answer and Help for May 15, #1791
https://www.cnet.com/tech/gaming/todays-wordle-hints-answer-and-help-for-may-15-1791/
Here are hints and the answer for today's Wordle for May 15, No. 1,791.
https://www.cnet.com/tech/gaming/todays-wordle-hints-answer-and-help-for-may-15-1791/
Here are hints and the answer for today's Wordle for May 15, No. 1,791.
Today's NYT Strands Hints, Answers and Help for May 15, #803
https://www.cnet.com/tech/gaming/todays-nyt-strands-hints-answers-and-help-for-may-15-803/
Here are hints and answers for the NYT Strands puzzle for May 15, No. 803.
https://www.cnet.com/tech/gaming/todays-nyt-strands-hints-answers-and-help-for-may-15-803/
Here are hints and answers for the NYT Strands puzzle for May 15, No. 803.
Today's NYT Connections: Sports Edition Hints and Answers for May 15, #599
https://www.cnet.com/tech/gaming/todays-nyt-connections-sports-edition-hints-and-answers-for-may-15-599/
Here are hints and the answers for the NYT Connections: Sports Edition puzzle for May 15, No. 599.
https://www.cnet.com/tech/gaming/todays-nyt-connections-sports-edition-hints-and-answers-for-may-15-599/
Here are hints and the answers for the NYT Connections: Sports Edition puzzle for May 15, No. 599.
You Can Now Make Apps on Meta Display Glasses if You Want To
https://www.cnet.com/tech/computing/you-can-finally-make-apps-on-meta-display-glasses-now-if-you-want-to/
Meta opens up ways to develop for its glasses, just as Google's glasses draw near.
https://www.cnet.com/tech/computing/you-can-finally-make-apps-on-meta-display-glasses-now-if-you-want-to/
Meta opens up ways to develop for its glasses, just as Google's glasses draw near.
We Got Chatbots to Turn Over Personal Information. How to Keep Yours Safe
https://www.cnet.com/tech/services-and-software/ai-chatbots-reveal-personal-information/
Your personal information, such as phone numbers and addresses, may already be accessible online.
https://www.cnet.com/tech/services-and-software/ai-chatbots-reveal-personal-information/
Your personal information, such as phone numbers and addresses, may already be accessible online.
Today's NYT Mini Crossword Answers for Friday, May 15
https://www.cnet.com/tech/gaming/todays-nyt-mini-crossword-answers-for-friday-may-15/
Here are the answers for The New York Times Mini Crossword for May 15.
https://www.cnet.com/tech/gaming/todays-nyt-mini-crossword-answers-for-friday-may-15/
Here are the answers for The New York Times Mini Crossword for May 15.
Asus and Xreal's $849 Gaming Display Glasses Are Available for Preorder
https://www.cnet.com/tech/gaming/asus-and-xreals-849-gaming-display-glasses-are-available-for-preorder/
They come with a dock and can work at 240Hz, but they're not cheap.
https://www.cnet.com/tech/gaming/asus-and-xreals-849-gaming-display-glasses-are-available-for-preorder/
They come with a dock and can work at 240Hz, but they're not cheap.
Google to Detail Agentic AI Models at I/O, Android 17 Features and Smart Glasses Reveal Expected | Tech Today video
https://www.cnet.com/videos/google-to-detail-agentic-ai-models-at-io-android-17-features-and-smart-glasses-reveal-expected-tech-today/
Wes Ott covers a preview of the upcoming Google I/O developer conference. Google is expected to detail its agentic AI models, Android 17 features, and a first look at consumer smart glasses running Android XR. Plus, we may get a first official look at Aluminium OS, the merger of Android and ChromeOS.
https://www.cnet.com/videos/google-to-detail-agentic-ai-models-at-io-android-17-features-and-smart-glasses-reveal-expected-tech-today/
Wes Ott covers a preview of the upcoming Google I/O developer conference. Google is expected to detail its agentic AI models, Android 17 features, and a first look at consumer smart glasses running Android XR. Plus, we may get a first official look at Aluminium OS, the merger of Android and ChromeOS.
Don't Buy an Expensive OLED! Alienware's $349 27-Incher Rocks Casual Gaming (and It Does 240Hz) video
https://www.cnet.com/videos/dont-buy-an-expensive-oled-alienwares-349-27-incher-rocks-casual-gaming-and-it-does-240hz/
Alienware just dropped the cheapest OLED gaming monitor we've seen, but are the savings worth it? Here's our opinion of the 27 240Hz QD-OLED.
https://www.cnet.com/videos/dont-buy-an-expensive-oled-alienwares-349-27-incher-rocks-casual-gaming-and-it-does-240hz/
Alienware just dropped the cheapest OLED gaming monitor we've seen, but are the savings worth it? Here's our opinion of the 27 240Hz QD-OLED.