CISA has warned U.S. government agencies about an actively exploited vulnerability in Cisco Catalyst SD-WAN Manager. Tracked as CVE-2026-20262, successful exploitation of this vulnerability could allow an authenticated, remote attacker to create or overwrite any file on the affected system’s filesystem. CISA has urged users to patch the vulnerability before June 29, 2026.