CVE-2026-76504 added 2026-09-30 under BOD 26-04 risk-based remediation — buyers with public SD-WAN Manager should prioritize KEV patch + check for pre-patch compromise, not panic theater.
CISA’s 30 Sep 2026 alert added CVE-2026-76504 (Cisco Catalyst SD-WAN Manager) to the Known Exploited Vulnerabilities catalog, citing evidence of active exploitation and pointing agencies to BOD 26-04. Enterprise and MSP buyers: inventory exposed Manager instances, patch per vendor guidance, and assess for compromise before the patch window closed — checklist, not fearmongering.
Source: CISA — CISA adds one known exploited vulnerability to catalog (2026-09-30)