Mandiant reveals how Cisco SD-WAN zero-day attacks gained root access
Cisco Catalyst SD-WAN devices have been compromised in zero-day attacks, with hackers exploiting a previously unknown vulnerability to gain root access. This exploitation, tracked as CVE-2026-20245, a