Analista de Gestión de Vulnerabilidades: 2026-09-30

1. Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability

   Cisco, 2026-09-30. Leer, 7 min.

   Cisco disclosed CVE-2026-76504 (CVSS 9.8), a flaw in the API authentication of Cisco Catalyst SD-WAN Manager that could let an unauthenticated, remote attacker access an affected system with the privileges of the admin user, and says its PSIRT became aware of active exploitation in September 2026. Fixed releases include 20.9.10.1, 20.12.8.2, 20.15.6.1, 20.18.4.1, 26.1.2.1 and 26.2.1, and the Cisco-managed cloud release 20.15.605 needs no customer action.

   Por qué importa para este rol: Rank SD-WAN Manager above routine network patches this cycle, because Cisco reports active exploitation and treats its mitigation as temporary only.

2. Vulnerability Discovery and Exploitation Trends in the AI Era

   Google Threat Intelligence Group, 2026-09-30. Leer, 17 min.

   Google Threat Intelligence Group reports that monthly vulnerability disclosures doubled from 5,045 in January 2026 to 10,477 in July and reached 10,740 in August, while exploited vulnerabilities rose from an average of 10.5 per month in 2025 to 18 per month from January to August 2026. GTIG also found that, among vulnerabilities it could identify as likely AI-discovered, proportionally fewer were low risk and more were moderate risk or led to remote code execution.

   Por qué importa para este rol: Weigh exploitation evidence above raw CVE volume when setting this quarter's patch order, with GTIG counting only 0.23% of vulnerabilities disclosed in 2026 as exploited.

Analista de Gestión de Vulnerabilidades