Ongoing exploitation of Cisco Catalyst SD-WAN vulnerabilities

Cisco Catalyst SD-WAN products are under active exploitation by multiple threat actors leveraging both newly discovered and previously patched vulnerabilities to gain unauthorized access, deploy webshells, steal credentials, and establish persistent footholds, underscoring the urgent need for immediate patching and enhanced monitoring.