Threat actor leveraged Cisco SD-WAN zero-day since 2023 (CVE-2026-20127) Cybersecurity February 25, 2026 A “highly sophisticated” cyber threat actor has been exploiting a zero-day authentication bypass vulnerability (CVE-2026-20127) in Cisco Catalyst SD-WAN Controller…