A critical vulnerability in Cisco's Catalyst SD-WAN Manager, identified as CVE-2026-20262, has been patched after being exploited in zero-day attacks to gain root privileges. The flaw allowed attackers to escalate privileges, posing a significant risk to affected systems. Cisco has released security updates to address this issue, and users are advised to apply the patches immediately. The vulnerability is currently being discussed by Cisco, with its exploitation status determining the urgency of the patch1. Technical details of the vulnerability are limited, but its exploitation in zero-day attacks highlights the need for prompt action. The patch is available for affected versions of the Catalyst SD-WAN Manager, and users should verify their system's version to ensure they apply the correct update. This matters to network administrators because applying the patch promptly can prevent attackers from exploiting the vulnerability and gaining control of their SD-WAN infrastructure.