A read-only account can now own your whole WAN. CISA gave everyone until today to patch it.

On Friday, the US Cybersecurity and Infrastructure Security Agency added two flaws to its Known Exploited Vulnerabilities list. One of them should make any team running SD-WAN sit up. It is CVE-2026-1