UAT-8616 Cisco SD-WAN vManage REST API Configuration Enumeration

Ibrahim Saud@tektrix

•updated Jun 29, 2026•0•0•4

Detects anomalous bulk GET requests directed at Cisco SD-WAN (vManage) REST API endpoints, specifically targeting topology information, device lists, and configuration templates. This pattern of activity is indicative of reconnaissance or exfiltration attempts against the SD-WAN fabric management interface.