Security News Critical Cisco SD-WAN bug exploited in zero-day attacks since 2023 BleepingComputer Daniel Bender 25 Feb 2026 Cisco is warning that a critical authentication bypass vulnerability in Cisco Catalyst SD-WAN, tracked as CVE-2026-20127, was actively exploited in zero-day attacks that allowed remote attackers to compromise controllers and add malicious rogue peers to targeted networks.