Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability

CVE-2026-76504 is a hex encoding vulnerability in Cisco Catalyst SD-WAN Manager that allows unauthenticated remote attackers to gain admin-level access to affected systems. The flaw stems from improper handling of URI encoding in HTTP requests, enabling privilege escalation without credentials. The vulnerability is tracked by CISA and listed in the National Vulnerability Database. CISA has referenced this under BOD 26-04, which prioritizes security updates based on risk. Forensic triage requirements have also been outlined under BOD 26-04 implementation guidance. Organizations using Cisco Catalyst SD-WAN Manager are urged to apply patches immediately given the critical nature of unauthenticated admin access.