Podcast Detail

SANS Stormcast Thursday, October 1st, 2026: Cisco Catalyst SD-WAN Manager 0-day; Watchguard AP RCE; OpenBao/Vault RCE; Post Quantum Certs

If you are not able to play the podcast using the player below: Use this direct link to the audio file: https://traffic.libsyn.com/securitypodcast/10118.mp3

Cisco Catalyst SD-WAN Manager 0-day; Watchguard AP RCE; OpenBao/Vault RCE; Post Quantum Certs

00:00

Click HERE to learn more about classes Johannes is teaching for SANS

Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability CVE-2026-76504
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-webauth-xr8beuuU

WatchGuard AP Command Injection in Internal Management API Allows Command Execution
https://psirt.watchguard.com/CVE-2026-86102/

A Realistic Code Execution Exploit Chain in OpenBao and Vault
https://control-plane.io/posts/unauthed-to-rce-in-vault-and-openbao/

Building a post-quantum certificate authority with Merkle Tree Certificates
https://blog.cloudflare.com/pq-ca-with-mtcs/

My Upcoming Classes
https://www.sans.org/profiles/dr-johannes-ullrich

iTunes

MP3 Download

RSS Feed

Google

Podbean

Amazon Echo

YouTube

Spreaker

Spotify

Network Monitoring and Threat Detection In-Depth	Amsterdam	Oct 12th - Oct 17th 2026
Application Security: Securing Web Applications, APIs, and Microservices	Washington	Dec 14th - Dec 18th 2026
Application Security: Securing Web Applications, APIs, and Microservices	Online \| US Eastern	Feb 8th - Feb 12th 2027
Application Security: Securing Web Applications, APIs, and Microservices	Online \| India Standard Time	Mar 15th - Mar 19th 2027
Application Security: Securing Web Applications, APIs, and Microservices	Orlando	Apr 12th - Apr 16th 2027
Application Security: Securing Web Applications, APIs, and Microservices	Online \| US Mountain	Apr 21st - Apr 25th 2027
Application Security: Securing Web Applications, APIs, and Microservices	Baltimore	May 17th - May 21st 2027

no transcript found