Published threat advisories for February 25, 2026

An external attacker can exploit a flaw in VMware Aria Operations during support-assisted migration to execute unauthorized commands. This allows them to take full control of the platform, granting access to sensitive data and potentially compromising the organization's wider virtual infrastructure.

NVD published: February 25, 2026 • CISA KEV

An internal attacker with administrative access to Cisco Catalyst SD-WAN can bypass protections to access restricted system files. This could enable them to steal network credentials and configuration data, potentially leading to unauthorized control over the organization's network infrastructure.

NVD published: February 25, 2026 • CISA KEV

Cisco Catalyst SD-WAN Manager may allow an attacker to steal credentials and gain control of your network. This is a high-risk vulnerability actively exploited by attackers, demanding immediate attention.

NVD published: February 25, 2026 • CISA KEV

Cisco Catalyst SD-WAN controllers are vulnerable, allowing an external attacker to bypass security checks and gain full administrative access. This enables them to manipulate enterprise network settings, creating a serious risk of unauthorized traffic control or disruption across the organization.

NVD published: February 25, 2026 • CISA KEV

An internal attacker with limited access to the Cisco Catalyst SD-WAN Manager can overwrite system files to escalate their privileges. This could grant them unauthorized administrative control over the company's critical network management infrastructure.

NVD published: February 25, 2026 • CISA KEV