Cisco SD-WAN Live Protect Shield Release Notes
Available Languages
Bias-Free Language
The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
- US/Canada 800-553-2447
- Worldwide Support Phone Numbers
- All Tools
Feedback
Feedback
Cisco SD-WAN Live Protect Shield Release Notes
Affected Releases and Shield Mapping
Known Limitations and Side Effects
Recommendations and Deployment
Cisco SD-WAN Live Protect Shield Release Notes
Live Protect Shield ID: 1000101-01
CVE-ID: CVE-2026-76504
Cisco Security Advisory ID: cisco-sa-sdwan-webauth-xr8beuuU
A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager may allow an unauthenticated, remote attacker to gain unauthorized access to an affected system with administrative privileges. This security flaw is caused by improper handling of URI encoding within HTTP requests, which permits an attacker to bypass authentication rules designed to restrict access to sensitive API endpoints.
Affected Releases and Shield Mapping
The following table outlines the available Live Protect Shields for the affected Catalyst SD-WAN Manager software versions:
| Catalyst SD-WAN Release |
Live Protect Shield File |
| 20.15 and earlier |
Not Available |
| 20.18.3 |
sdwan-20.18.3-cve-2026-76504-v01.tar.gz |
| 20.18.3.1 |
sdwan-20.18.3.1-cve-2026-76504-v01.tar.gz |
| 20.18.4 |
sdwan-20.18.4-cve-2026-76504-v01.tar.gz |
| 26.1.2 |
sdwan-26.1.2-cve-2026-76504-v01.tar.gz |
Known Limitations and Side Effects
Before applying this shield, please be aware of the following potential impact:
Authentication Impact: Legitimate users employing specific URI encoding in their requests may experience intermittent issues when attempting to log into the SD-WAN Manager.
Recommendations and Deployment
While this Live Protect Shield effectively mitigates the primary methods of exploitation, Cisco strongly recommends you upgrade to a software release containing the permanent fix for this vulnerability to ensure full system integrity and coverage.
Deployment Workflow
You can identify and apply available Live Protect Shields directly through the Catalyst Manager Dashboard using Monitor > Advisories.
For detailed instructions on deploying and managing Cisco Live Protect in your environment, please refer to the Cisco Catalyst SD-WAN Network Monitoring Guide, specifically the chapter, Secure Cisco Catalyst SD-WAN with Live Protect.
Please be aware that Cisco Vulnerability Shields and Hardening Controls may not fully address potential risks during the device boot process, where systems may remain temporarily exposed before security policies are initialized, nor do they address the risk of system instability should an incompatible Vulnerability Shield cause a boot loop.
Additionally, while Cisco uses commercially reasonable efforts to create effective security technologies, Cisco does not represent or warrant that the Cisco Offer will guarantee absolute security or protect all files, systems, networks, or endpoints from all malwares, malicious attacks, or other threats.
© 2026 Cisco and/or its affiliates. All rights reserved.