Exploitation of Cisco SD-WAN appliances

https://cyberstack.org/n/cisco-sd-wan-2026

Advisory

Published 2026-03-01

Verified 2026-09-28

Exploitation of Cisco SD-WAN appliances (joint advisory)

ASD's ACSC, with Five Eyes partners, published mitigations for ongoing exploitation of Cisco SD-WAN, including CVE-2026-20127, CVE-2026-20128 and CVE-2026-20122. Patch, hunt, and follow Cisco's hardening guidance.

Product: Cisco SD-WAN
Exploited in Australia?: unknown

Primary: ASD's ACSC advisory
CVE: CVE-2026-20127, CVE-2026-20128, CVE-2026-20122

vulnerabilities australia network