CISA has added one new vulnerability to its  Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation.  CVE-2026-20182  Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability  This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Note: Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlined in  Emergency Directive 26-03: Mitigate Vulnerabilities in Cisco SD-WAN Systems  and  Supplemental Direction ED 26-03: Hunt and Hardening Guidance for Cisco SD-WAN Systems . Adhere to the applicable  Binding Operational Directive (BOD) 22-01  guidance for cloud services or discontinue use of the product if mitigations are not available.…