#Cisco

Cisco SD-WAN CVE-2026-20245: rogue peers, privilege escalation and forensic cleanup

Mandiant reports exploitation of CVE-2026-20245 after administrative access to Cisco SD-WAN infrastructure, with rogue peering, account manipulation and deliberate forensic cleanup.

Interlock exploited Cisco FMC flaw CVE-2026-20131 as a zero-day from 26 January, Amazon reports

Amazon reports Interlock exploited Cisco FMC flaw CVE-2026-20131 from 26 January, before Cisco's 4 March disclosure. CISA added it to KEV on 19 March and records known ransomware use.