What does BroadVision cover in its News & Insights?

Practical analysis and field reports from active engagements, managed IT, networks, cloud migration, cybersecurity, data and AI, drawn from BroadVision's work worldwide and 47 countries.

How often does BroadVision publish news?

We publish in-depth posts weekly, plus shorter project notes whenever a meaningful deployment, threat advisory or vendor change warrants it.

Where is BroadVision based?

BroadVision HUB is in Mulberry Hill Office Park, 4 Broadacres Drive, Dainfern, Johannesburg. Our teams operate worldwide and 47 countries.

The IT pulse, every Friday.

A weekly briefing on the developments shaping enterprise IT, cloud, AI, cybersecurity and SaaS, sourced from reputable publishers across the past seven days, interpreted by BiVi Intelligence for IT leaders, with every story linked back to its original report. The previous fortnight stays available below.

Cybersecurity

Cisco Reports Critical Zero-Day Vulnerability in Catalyst SD-WAN Manager

30 September 2026

Cisco has issued an advisory regarding CVE-2026-76504, a critical authentication bypass vulnerability in Catalyst SD-WAN Manager currently being exploited by remote attackers.

Cisco Reports Critical Zero-Day Vulnerability in Catalyst SD-WAN Manager

Cisco released a security advisory on September 30 regarding a critical zero day vulnerability affecting the Catalyst SD-WAN Manager. The flaw, identified as CVE-2026-76504, targets the system used by organizations to manage their SD-WAN network infrastructure. This vulnerability represents a significant security risk as it allows for unauthorized access to core management functions without requiring valid credentials.

The technical nature of the exploit involves the Manager API. According to Cisco, a remote attacker with no prior login access can utilize the API to perform actions with administrative privileges. This bypass effectively gives attackers full control over the SD-WAN management interface, potentially allowing for broad configuration changes or network disruption. Cisco confirmed that this flaw is being actively exploited in the wild.

There are currently no known workarounds for this vulnerability, making immediate software updates the only path for remediation. Cisco has released fixed software versions to address the security hole. Organizations running affected versions of Catalyst SD-WAN Manager are encouraged to apply these patches to prevent unauthorized administrative access.

For IT directors and operations leaders, this incident underscores the necessity of maintaining current patch levels on centralized management platforms. Because SD-WAN Manager serves as a single point of control for the entire network fabric, a compromise at this level can lead to widespread operational impact. Ensuring that API access is monitored and that management systems are updated promptly is vital for maintaining infrastructure integrity.

The BroadVision view

This zero day exploitation highlights the critical importance of securing centralized network management tools against unauthorized API access. Mid-market IT teams should prioritize immediate patching of management consoles to prevent full administrative bypass. Proactive oversight of network architecture is essential for maintaining secure connectivity and infrastructure.

Have a story for us, or a problem we can write about?

Get in touch