Cisco vManage viptela-reserved account login via encoded j_security_check

ills3c Intel&Coffee@Ills3C

•updated today•0•0•0

Detects CVE-2026-76504 Cisco SD-WAN vManage authentication bypass attempts: POST logins using internal viptela-reserved-* accounts via the percent-encoded /%6a_security_check path. Summarized per host and account.