What does BroadVision cover in its News & Insights?

Practical analysis and field reports from active engagements, managed IT, networks, cloud migration, cybersecurity, data and AI, drawn from BroadVision's work worldwide and 47 countries.

How often does BroadVision publish news?

We publish in-depth posts weekly, plus shorter project notes whenever a meaningful deployment, threat advisory or vendor change warrants it.

Where is BroadVision based?

BroadVision HUB is in Mulberry Hill Office Park, 4 Broadacres Drive, Dainfern, Johannesburg. Our teams operate worldwide and 47 countries.

The IT pulse, every Friday.

A weekly briefing on the developments shaping enterprise IT, cloud, AI, cybersecurity and SaaS, sourced from reputable publishers across the past seven days, interpreted by BiVi Intelligence for IT leaders, with every story linked back to its original report. The previous fortnight stays available below.

Cybersecurity

CISA Adds Cisco Catalyst SD-WAN Manager Vulnerability to KEV Catalog

1 October 2026

The U.S. Cybersecurity and Infrastructure Security Agency added a critical Cisco Catalyst SD-WAN Manager authentication bypass flaw to its Known Exploited Vulnerabilities catalog.

CISA Adds Cisco Catalyst SD-WAN Manager Vulnerability to KEV Catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has updated its Known Exploited Vulnerabilities (KEV) catalog to include a critical flaw affecting Cisco Catalyst SD-WAN Manager. The vulnerability, identified as CVE-2026-76504, carries a CVSS score of 9.8, indicating its severe risk level. CISA confirmed that the flaw is currently being exploited in the wild, necessitating immediate attention from organizations utilizing the impacted networking hardware.

This authentication bypass vulnerability allows an unauthenticated, remote attacker to gain access to an affected system. The technical nature of the flaw enables attackers to bypass existing security controls, potentially granting high level access to the SD-WAN management interface without valid credentials. This type of security gap is particularly significant given the central role SD-WAN Manager plays in orchestrating enterprise network traffic and policy configurations.

Federal agencies are required to remediate this vulnerability within a specific timeframe as mandated by CISA directives, though the agency also strongly advises private sector organizations to prioritize patching. The inclusion in the KEV catalog serves as a formal alert that the vulnerability is not merely theoretical but is being actively used by threat actors to compromise enterprise environments.

For IT directors and operations leaders, this development highlights the ongoing risks associated with centralized management platforms in software defined networking. Ensuring that edge infrastructure and management consoles are updated against known exploits is a critical component of maintaining organizational security posture and operational continuity.

The BroadVision view

This CISA update underscores the necessity for mid-market IT teams to maintain rigorous patch management schedules for core networking infrastructure. Addressing critical vulnerabilities in management consoles is vital to preventing unauthorized remote access to the broader corporate network. Organizations should review their current exposure and update systems to secure their connectivity infrastructure. Teams weighing what to change first can review BroadVision's managed IT services.

Have a story for us, or a problem we can write about?

Get in touch