{"id":11255,"date":"2026-10-04T00:05:55","date_gmt":"2026-10-04T00:05:55","guid":{"rendered":"https:\/\/bitep.net\/blog\/2026\/10\/04\/cisco-catalyst-sd-wan-manager-d%c9%99-kritik-autentifikasiyadan-yan-ke%c3%a7m%c9%99-z%c9%99ifliyi-a%c5%9f\/"},"modified":"2026-10-04T00:05:55","modified_gmt":"2026-10-04T00:05:55","slug":"cisco-catalyst-sd-wan-manager-d%c9%99-kritik-autentifikasiyadan-yan-ke%c3%a7m%c9%99-z%c9%99ifliyi-a%c5%9f","status":"publish","type":"post","link":"https:\/\/bitep.net\/blog\/2026\/10\/04\/cisco-catalyst-sd-wan-manager-d%c9%99-kritik-autentifikasiyadan-yan-ke%c3%a7m%c9%99-z%c9%99ifliyi-a%c5%9f\/","title":{"rendered":"Cisco Catalyst SD-WAN Manager-d\u0259 Kritik Autentifikasiyadan Yan Ke\u00e7m\u0259 Z\u0259ifliyi A\u015fkarland\u0131 (CVE-2026-76504)"},"content":{"rendered":"

Cisco Catalyst SD-WAN Manager-d\u0259 Kritik T\u0259hl\u00fck\u0259sizlik B\u00f6hran\u0131: CVE-2026-76504<\/h2>\n

M\u00fcasir korporativ \u015f\u0259b\u0259k\u0259l\u0259rin m\u0259rk\u0259zi idar\u0259etm\u0259 s\u00fctunu hesab edil\u0259n Cisco Catalyst SD-WAN Manager (ke\u00e7mi\u015f vManage) proqram t\u0259minat\u0131nda CVSS \u015fkalas\u0131 \u00fczr\u0259 \u0259n y\u00fcks\u0259k t\u0259hl\u00fck\u0259lik d\u0259r\u0259c\u0259l\u0259rind\u0259n biri \u2014 9.8<\/strong> bal il\u0259 qiym\u0259tl\u0259ndiril\u0259n kritik t\u0259hl\u00fck\u0259sizlik z\u0259ifliyi a\u015fkar edilmi\u015fdir. CVE-2026-76504<\/strong> identifikatoru verilmi\u015f bu bo\u015fluq uzaqdan olan, autentifikasiyadan ke\u00e7m\u0259mi\u015f h\u00fccum\u00e7uya sistem \u00fcz\u0259rind\u0259 tam inzibat\u00e7\u0131 (administrator) s\u0259lahiyy\u0259tl\u0259ri \u0259ld\u0259 etm\u0259y\u0259 imkan verir.<\/p>\n

Cisco M\u0259hsul T\u0259hl\u00fck\u0259sizliyi \u0130nsidentl\u0259rin\u0259 Reaksiya Qrupu (PSIRT) t\u0259r\u0259find\u0259n yay\u0131mlanan t\u0259cili b\u00fclletend\u0259 vur\u011fulan\u0131r ki, z\u0259iflik n\u0259z\u0259ri xarakter da\u015f\u0131m\u0131r v\u0259 art\u0131q real kiberh\u00fccumlarda f\u0259al \u015f\u0259kild\u0259 istismar edilir (zero-day statusunda). \u015e\u0259b\u0259k\u0259 paradiqmas\u0131n\u0131n m\u0259rk\u0259zind\u0259 dayanan bu n\u0259zar\u0259t d\u00fcy\u00fcn\u00fcn\u00fcn kompromis\u0259 u\u011framas\u0131 b\u00fct\u00fcn SD-WAN infrastrukturunun, o c\u00fcml\u0259d\u0259n mar\u015frutla\u015fd\u0131rma siyas\u0259tl\u0259rinin, \u015fifr\u0259l\u0259m\u0259 a\u00e7arlar\u0131n\u0131n v\u0259 k\u0259nar (edge) cihazlar\u0131n tam \u015f\u0259kild\u0259 t\u0259cav\u00fczkarlar\u0131n n\u0259zar\u0259ti alt\u0131na ke\u00e7m\u0259si dem\u0259kdir.<\/p>\n

Texniki T\u0259hlil: URI Kodla\u015fd\u0131rma X\u0259tas\u0131 v\u0259 API Autentifikasiya Mexanizminin Yan Ke\u00e7ilm\u0259si<\/h2>\n

Z\u0259ifliyin k\u00f6k\u00fcnd\u0259 Cisco Catalyst SD-WAN Manager arxitekturas\u0131nda veb sor\u011fular\u0131n qar\u015f\u0131lanmas\u0131 v\u0259 daxili API sessiya idar\u0259etm\u0259si aras\u0131ndak\u0131 URI normalizasiyas\u0131 (URI normalization) uy\u011funsuzlu\u011fu dayan\u0131r. Sistem daxilind\u0259 veb sor\u011fular\u0131 q\u0259bul ed\u0259n xidm\u0259t proksisi (service-proxy) il\u0259 arxa planda yerl\u0259\u015f\u0259n t\u0259tbiq m\u00fch\u0259rriki (vManage web\/API server) daxil olan HTTP sor\u011fular\u0131ndak\u0131 simvollar\u0131 f\u0259rqli \u015f\u0259kild\u0259 emal edir.<\/p>\n

T\u0259hl\u00fck\u0259sizlik baryerl\u0259ri konfiqurasiya edil\u0259rk\u0259n m\u00fc\u0259yy\u0259n API yollar\u0131 v\u0259 autentifikasiya filtrl\u0259ri birba\u015fa m\u0259tn m\u00fcqayis\u0259si v\u0259 ya z\u0259if regex qaydalar\u0131 il\u0259 yoxlan\u0131l\u0131r. Lakin sor\u011fu daxilind\u0259 faiz kodla\u015fd\u0131rmas\u0131 (URL encoding \/ percent-encoding) t\u0259tbiq edildikd\u0259, proksi s\u0259viyy\u0259sind\u0259 qoruyucu mexanizml\u0259r sor\u011funu “qorunmayan” v\u0259 ya “icaz\u0259 t\u0259l\u0259b olunmayan” resurs kimi qeyd\u0259 al\u0131r. N\u0259tic\u0259d\u0259 sor\u011fu daxili emal m\u00fch\u0259rrikin\u0259 \u00f6t\u00fcr\u00fcld\u00fckd\u0259, t\u0259tbiq URI-ni dekodla\u015fd\u0131r\u0131r v\u0259 sor\u011funun birba\u015fa kritik autentifikasiya kontekstin\u0259 aid oldu\u011funu m\u00fc\u0259yy\u0259n edir, lakin art\u0131q t\u0259hl\u00fck\u0259sizlik filtrl\u0259ri yan ke\u00e7ildiyi \u00fc\u00e7\u00fcn sor\u011fu t\u0259sdiql\u0259nmi\u015f kimi icra olunur.<\/p>\n

H\u00fccum Mexanizmi: %6a_security_check v\u0259 NetAdmin S\u0259lahiyy\u0259tl\u0259rinin \u018fl\u0259 Ke\u00e7irilm\u0259si<\/h2>\n

H\u00fccum ssenarisi son d\u0259r\u0259c\u0259 sad\u0259 v\u0259 eyni zamanda da\u011f\u0131d\u0131c\u0131d\u0131r. Java\/Tomcat \u0259sasl\u0131 autentifikasiya mexanizml\u0259rind\u0259 standart olaraq istifad\u0259 olunan j_security_check<\/code> sonlu\u011fu istismar vektorunun \u0259sas h\u0259d\u0259fidir. T\u0259cav\u00fczkar h\u0259r hans\u0131 istifad\u0259\u00e7i ad\u0131 v\u0259 ya parol t\u0259qdim etm\u0259d\u0259n, sad\u0259c\u0259 HTTP sor\u011fu yolundak\u0131 “j” h\u0259rfini onun onalt\u0131l\u0131q (hex) ekvivalenti olan %6a<\/code> simvolu il\u0259 \u0259v\u0259zl\u0259yir:<\/p>\n

POST \/%6a_security_check HTTP\/1.1\nHost: <vmanage-ip>\nUser-Agent: Mozilla\/5.0\nContent-Type: application\/x-www-form-urlencoded\nContent-Length: 0<\/code><\/pre>\n
Bu manipulyasiya n\u0259tic\u0259sind\u0259 ba\u015f ver\u0259n prosesl\u0259r z\u0259nciri a\u015fa\u011f\u0131dak\u0131 kimidir:<\/p>\n
    \n
  • Filtrin Aldad\u0131lmas\u0131:<\/strong> T\u0259hl\u00fck\u0259sizlik modulu \/%6a_security_check<\/code> s\u0259trini standart qorunan \/j_security_check<\/code> endpoint-i kimi tan\u0131m\u0131r v\u0259 bloklam\u0131r.<\/li>\n
  • Normalizasiya v\u0259 Emal:<\/strong> Daxili API konteyneri sor\u011funu dekodla\u015fd\u0131raraq j<\/code> simvolunu b\u0259rpa edir v\u0259 sessiya idar\u0259etm\u0259 m\u00fch\u0259rrikini i\u015f\u0259 sal\u0131r.<\/li>\n
  • \u0130mtiyazlar\u0131n T\u0259yini:<\/strong> T\u0259tbiqd\u0259ki m\u0259ntiqi x\u0259ta s\u0259b\u0259bind\u0259n he\u00e7 bir etibarnam\u0259 (credential) t\u0259l\u0259b olunmadan yeni sessiyaya avtomatik olaraq sistemin \u0259n y\u00fcks\u0259k imtiyazl\u0131 rolu \u2014 netadmin<\/strong> h\u00fcquqlar\u0131na malik admin<\/strong> s\u0259lahiyy\u0259ti verilir.<\/li>\n
  • Sessiya Tokeninin \u018fl\u0259 Ke\u00e7irilm\u0259si:<\/strong> Cavab ba\u015fl\u0131\u011f\u0131nda h\u00fccum\u00e7uya tam s\u0259lahiyy\u0259tli sessiya kukisi (session cookie) v\u0259 ya CSRF tokeni qaytar\u0131l\u0131r v\u0259 bununla da SD-WAN Manager tam kompromis\u0259 u\u011fray\u0131r.<\/li>\n<\/ul>\n
    Real H\u00fccumlar v\u0259 T\u0259sir Zonas\u0131: \u0130nternet\u0259 A\u00e7\u0131q Qalan SD-WAN \u0130dar\u0259etm\u0259 D\u00fcy\u00fcnl\u0259ri<\/h2>\n
    Cisco PSIRT t\u0259r\u0259find\u0259n apar\u0131lan ara\u015fd\u0131rma zaman\u0131 m\u0259lum olmu\u015fdur ki, bu z\u0259iflik ilk d\u0259f\u0259 Cisco TAC (Texniki D\u0259st\u0259k M\u0259rk\u0259zi) sor\u011fusunun t\u0259hlili zaman\u0131 a\u015fkarlanm\u0131\u015fd\u0131r. M\u00fc\u015ft\u0259ri m\u00fchitind\u0259 qeyd\u0259 al\u0131nan \u015f\u00fcbh\u0259li f\u0259aliyy\u0259tl\u0259r z\u0259ifliyin art\u0131q t\u0259cav\u00fczkarlar t\u0259r\u0259find\u0259n aktiv istismar edildiyini t\u0259sdiql\u0259mi\u015fdir.<\/p>\n
    \u018fsas risk faktoru bir \u00e7ox t\u0259\u015fkilatlar\u0131n Catalyst SD-WAN Manager idar\u0259etm\u0259 interfeysl\u0259rini (Port 443) birba\u015fa ictimai internet\u0259 a\u00e7\u0131q saxlamas\u0131d\u0131r. T\u0259cav\u00fczkarlar k\u00fctl\u0259vi skanerl\u0259r vasit\u0259sil\u0259 a\u00e7\u0131q vManage instansiyalar\u0131n\u0131 a\u015fkar edir v\u0259 saniy\u0259l\u0259r \u0259rzind\u0259 he\u00e7 bir autentifikasiya t\u0259l\u0259b olunmadan \u015f\u0259b\u0259k\u0259 topologiyas\u0131na s\u0131z\u0131rlar. Bu s\u0259lahiyy\u0259ti \u0259ld\u0259 ed\u0259n h\u00fccum\u00e7u a\u015fa\u011f\u0131dak\u0131 da\u011f\u0131d\u0131c\u0131 \u0259m\u0259liyyatlar\u0131 h\u0259yata ke\u00e7ir\u0259 bilir:<\/p>\n
      \n
    • SD-WAN par\u00e7as\u0131ndak\u0131 (fabric) b\u00fct\u00fcn mar\u015frutla\u015fd\u0131r\u0131c\u0131lar\u0131n konfiqurasiyalar\u0131n\u0131 d\u0259yi\u015fdirm\u0259k v\u0259 silm\u0259k;<\/li>\n
    • M\u0259lumat ax\u0131n\u0131n\u0131 k\u0259nar serverl\u0259r\u0259 y\u00f6n\u0259ld\u0259r\u0259k Man-in-the-Middle (MitM) h\u00fccumlar\u0131 t\u0259\u015fkil etm\u0259k;<\/li>\n
    • vSmart v\u0259 vBond n\u0259zar\u0259t\u00e7il\u0259ri il\u0259 \u0259laq\u0259ni k\u0259s\u0259r\u0259k b\u00fct\u00fcn qlobal korporativ \u015f\u0259b\u0259k\u0259d\u0259 xidm\u0259td\u0259n imtina (DoS) v\u0259ziyy\u0259ti yaratmaq;<\/li>\n
    • Cihazlar \u00fcz\u0259rind\u0259 daimi arxa qap\u0131lar (backdoors) v\u0259 x\u00fcsusi istifad\u0259\u00e7i hesablar\u0131 formala\u015fd\u0131rmaq.<\/li>\n<\/ul>\n
      T\u0259sir\u0259 M\u0259ruz Qalan Versiyalar v\u0259 T\u0259cili Yenil\u0259nm\u0259 Matrisi<\/h2>\n
      Cisco r\u0259smi olaraq bildirir ki, CVE-2026-76504 z\u0259ifliyi \u00fc\u00e7\u00fcn he\u00e7 bir m\u00fcv\u0259qq\u0259ti h\u0259ll yolu (workaround) m\u00f6vcud deyil<\/strong>. Riski aradan qald\u0131rma\u011f\u0131n yegan\u0259 yolu t\u0259sirl\u0259nmi\u015f sisteml\u0259ri r\u0259smi t\u0259hl\u00fck\u0259sizlik yenil\u0259m\u0259l\u0259rin\u0259 d\u0259rhal y\u00fcks\u0259ltm\u0259kdir.<\/p>\n\n\n\n\n\n\n\n\n\n\n
      \u018fsas Proqram T\u0259minat\u0131 Qolu<\/th>\nZ\u0259ifliy\u0259 M\u0259ruz Qalan Versiyalar<\/th>\nT\u0259hl\u00fck\u0259sizlik Yenil\u0259m\u0259si (D\u00fcz\u0259li\u015f)<\/th>\n<\/tr>\n<\/thead>\n
      20.9<\/td>\n20.9.10 v\u0259 \u0259vv\u0259lki b\u00fct\u00fcn burax\u0131l\u0131\u015flar<\/td>\n20.9.10.1<\/strong><\/td>\n<\/tr>\n
      20.12<\/td>\n20.12.8.1 v\u0259 \u0259vv\u0259lki b\u00fct\u00fcn burax\u0131l\u0131\u015flar<\/td>\n20.12.8.2<\/strong><\/td>\n<\/tr>\n
      20.15<\/td>\n20.15.6 v\u0259 \u0259vv\u0259lki b\u00fct\u00fcn burax\u0131l\u0131\u015flar<\/td>\n20.15.6.1<\/strong><\/td>\n<\/tr>\n
      20.18<\/td>\n20.18.4 v\u0259 \u0259vv\u0259lki b\u00fct\u00fcn burax\u0131l\u0131\u015flar<\/td>\n20.18.4.1<\/strong><\/td>\n<\/tr>\n
      26.1<\/td>\n26.1.2 v\u0259 \u0259vv\u0259lki b\u00fct\u00fcn burax\u0131l\u0131\u015flar<\/td>\n26.1.2.1<\/strong><\/td>\n<\/tr>\n
      26.2<\/td>\n26.2.0<\/td>\n26.2.1<\/strong><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
      Kompromis \u018flam\u0259tl\u0259rinin (IoC) A\u015fkarlanmas\u0131 v\u0259 Loq Analizi<\/h2>\n
      Sistem inzibat\u00e7\u0131lar\u0131 v\u0259 kibert\u0259hl\u00fck\u0259sizlik komandalar\u0131 t\u0259cili olaraq SD-WAN Manager d\u00fcy\u00fcnl\u0259rind\u0259 kompromis \u0259lam\u0259tl\u0259rini t\u0259fti\u015f etm\u0259lidirl\u0259r. Analiz \u00fc\u00e7\u00fcn iki \u0259sas loq fayl\u0131 yoxlan\u0131lmal\u0131d\u0131r:<\/p>\n
        \n
      1. \/var\/log\/nms\/containers\/service-proxy\/serviceproxy-access.log<\/code><\/li>\n
      2. \/var\/log\/nms\/vmanage-server.log<\/code><\/li>\n<\/ol>\n
        1. Kodla\u015fd\u0131r\u0131lm\u0131\u015f Sor\u011fular\u0131n Loqlarda Axtar\u0131\u015f\u0131<\/h3>\n
        Xidm\u0259t proksisinin giri\u015f loqlar\u0131nda URL kodla\u015fd\u0131rmas\u0131ndan istifad\u0259 edil\u0259r\u0259k g\u00f6nd\u0259ril\u0259n manipulyativ sor\u011fular\u0131 a\u015fkar etm\u0259k \u00fc\u00e7\u00fcn vManage konsolunda v\u0259 ya SSH sessiyas\u0131nda a\u015fa\u011f\u0131dak\u0131 \u0259mrl\u0259ri icra edin:<\/p>\n
        grep -Ei \"%6a_security_check\" \/var\/log\/nms\/containers\/service-proxy\/serviceproxy-access.log\ngrep -Ei \"(%2f|%25|%6a|%4a).*security_check\" \/var\/log\/nms\/containers\/service-proxy\/serviceproxy-access.log<\/code><\/pre>\n
        \u018fg\u0259r sor\u011fularda HTTP 200 v\u0259 ya 302 status kodlar\u0131 il\u0259 m\u00fc\u015fayi\u0259t olunan bu tip s\u0259tirl\u0259r a\u015fkarlanarsa, bu, sistemin istismar c\u0259hdin\u0259 m\u0259ruz qald\u0131\u011f\u0131n\u0131 g\u00f6st\u0259r\u0259n ilkin g\u00f6st\u0259ricidir.<\/p>\n
        2. \u015e\u00fcbh\u0259li Xidm\u0259t Hesablar\u0131n\u0131n T\u0259fti\u015fi<\/h3>\n
        H\u00fccum\u00e7ular\u0131n t\u0259tbiq daxilind\u0259 s\u0259lahiyy\u0259t \u0259ld\u0259 etdikd\u0259n sonra daxili xidm\u0259t prosesl\u0259rind\u0259n v\u0259 ya standart adland\u0131rma \u015fablonlar\u0131ndan istifad\u0259 ed\u0259r\u0259k gizl\u0259nm\u0259y\u0259 \u00e7al\u0131\u015fd\u0131qlar\u0131 m\u00fc\u0259yy\u0259n edilmi\u015fdir. vmanage-server.log<\/code> fayl\u0131nda qeyri-adi f\u0259aliyy\u0259tl\u0259r g\u00f6st\u0259r\u0259n daxili hesablar\u0131 yoxlay\u0131n:<\/p>\n
        grep -Ei \"viptela-reserved-\" \/var\/log\/nms\/vmanage-server.log\ngrep -Ei \"User.*admin.*authenticated successfully\" \/var\/log\/nms\/vmanage-server.log<\/code><\/pre>\n
        \u018fg\u0259r xarici, tan\u0131nmayan IP \u00fcnvanlar\u0131ndan viptela-reserved-<\/code> prefiksi il\u0259 ba\u015flayan hesablar v\u0259 ya g\u00f6zl\u0259nilm\u0259z vaxtlarda ba\u015f tutmu\u015f admin<\/code> sessiyalar\u0131 m\u00f6vcuddursa, insidentin ara\u015fd\u0131r\u0131lmas\u0131 d\u0259rhal ba\u015flad\u0131lmal\u0131d\u0131r.<\/p>\n
        \u015e\u0259b\u0259k\u0259 T\u0259hl\u00fck\u0259sizliyi v\u0259 Hardening T\u00f6vsiy\u0259l\u0259ri<\/h2>\n
        Yenil\u0259m\u0259 paketl\u0259ri t\u0259tbiq olunana q\u0259d\u0259r v\u0259 \u00fcmumilikd\u0259 g\u0259l\u0259c\u0259k h\u00fccum vektorlar\u0131n\u0131 m\u0259hdudla\u015fd\u0131rmaq \u00fc\u00e7\u00fcn idar\u0259etm\u0259 m\u00fcst\u0259visi (Management Plane) d\u0259rhal s\u0259rtl\u0259\u015fdirilm\u0259lidir (hardening):<\/p>\n
          \n
        • Port 443 (HTTPS Web UI v\u0259 REST API) \u0130nternet\u0259 Ba\u011flanmal\u0131d\u0131r:<\/strong> Catalyst SD-WAN Manager he\u00e7 bir halda ictimai internet\u0259 a\u00e7\u0131q olmamal\u0131d\u0131r. Veb interfeys\u0259 giri\u015f yaln\u0131z daxili idar\u0259etm\u0259 \u015f\u0259b\u0259k\u0259si (Out-of-Band Management – OOBM) v\u0259 ya s\u0259rt Giri\u015f \u0130dar\u0259etm\u0259 Siyah\u0131lar\u0131 (ACL) il\u0259 qorunan VPN tunell\u0259ri \u00fcz\u0259rind\u0259n h\u0259yata ke\u00e7irilm\u0259lidir.<\/li>\n
        • Port 22 (SSH) M\u0259hdudla\u015fd\u0131r\u0131lmas\u0131:<\/strong> SSH protokolu \u00fczr\u0259 giri\u015fl\u0259r yaln\u0131z m\u00fc\u0259yy\u0259n edilmi\u015f bastion hostlar v\u0259 \u015f\u0259b\u0259k\u0259 administratorlar\u0131n\u0131n statik IP \u00fcnvanlar\u0131 il\u0259 m\u0259hdudla\u015fd\u0131r\u0131lmal\u0131d\u0131r.<\/li>\n
        • Port 830 (NETCONF) \u0130zolyasiyas\u0131:<\/strong> NETCONF portu yaln\u0131z n\u0259zar\u0259t\u00e7il\u0259r (vSmart, vBond) v\u0259 k\u0259nar mar\u015frutla\u015fd\u0131r\u0131c\u0131lar (cEdge, vEdge) il\u0259 qar\u015f\u0131l\u0131ql\u0131 \u0259laq\u0259 \u00fc\u00e7\u00fcn z\u0259ruridir. Bu porta k\u0259nar \u015f\u0259b\u0259k\u0259l\u0259rd\u0259n h\u0259r hans\u0131 birba\u015fa giri\u015f c\u0259hdi d\u0259rhal bloklanmal\u0131d\u0131r.<\/li>\n
        • N\u0259zar\u0259t M\u00fcst\u0259visinin Qorunmas\u0131 (CoPP):<\/strong> SD-WAN komponentl\u0259rind\u0259 Control Plane Policing mexanizml\u0259rini t\u0259tbiq ed\u0259r\u0259k icaz\u0259siz seqmentl\u0259rd\u0259n daxil olan idar\u0259etm\u0259 sor\u011fular\u0131n\u0131 d\u0259r\u0259c\u0259l\u0259ndirin v\u0259 ya tamamil\u0259 r\u0259dd edin.<\/li>\n<\/ul>\n
          Yekun v\u0259 BITEP T\u00f6vsiy\u0259l\u0259ri<\/h2>\n
          CVE-2026-76504 z\u0259ifliyi m\u00fcasir proqram t\u0259minat\u0131 il\u0259 t\u0259yin olunan \u015f\u0259b\u0259k\u0259l\u0259rin t\u0259hl\u00fck\u0259sizliyind\u0259 kritik bir n\u00f6qt\u0259ni t\u0259msil edir. \u0130dar\u0259etm\u0259 m\u0259rk\u0259zinin bir sor\u011fu il\u0259 \u0259l\u0259 ke\u00e7irilm\u0259si korporativ \u015f\u0259b\u0259k\u0259 seqmentasiyas\u0131n\u0131 (Zero Trust arxitekturas\u0131n\u0131) tamamil\u0259 m\u0259nas\u0131zla\u015fd\u0131r\u0131r.<\/p>\n
          BITEP Kibert\u0259hl\u00fck\u0259sizlik M\u0259rk\u0259zi<\/strong> olaraq \u015f\u0259b\u0259k\u0259 v\u0259 informasiya t\u0259hl\u00fck\u0259sizliyi komandalar\u0131na a\u015fa\u011f\u0131dak\u0131 add\u0131mlar\u0131 gecikm\u0259d\u0259n icra etm\u0259yi t\u00f6vsiy\u0259 edirik:<\/p>\n
            \n
          1. Cisco Catalyst SD-WAN Manager instansiyalar\u0131n\u0131z\u0131n internet\u0259 a\u00e7\u0131q olub-olmad\u0131\u011f\u0131n\u0131 xarici perimetr skan al\u0259tl\u0259ri il\u0259 d\u0259rhal yoxlay\u0131n v\u0259 a\u015fkarlanarsa d\u0259rhal giri\u015fi m\u0259hdudla\u015fd\u0131r\u0131n.<\/li>\n
          2. Yuxar\u0131da g\u00f6st\u0259ril\u0259n r\u0259smi d\u00fcz\u0259li\u015f paketl\u0259rini (patch) kritik infrastruktur d\u0259yi\u015fikliyi qaydalar\u0131na uy\u011fun olaraq n\u00f6vb\u0259d\u0259nk\u0259nar t\u0259tbiq edin.<\/li>\n
          3. Yenil\u0259m\u0259d\u0259n \u0259vv\u0259l g\u00f6st\u0259ril\u0259n loq fayllar\u0131n\u0131 kiber-kriminalistika (forensics) t\u0259l\u0259bl\u0259rin\u0259 uy\u011fun arxivl\u0259\u015fdir\u0259r\u0259k kompromis \u0259lam\u0259tl\u0259rinin olub-olmad\u0131\u011f\u0131n\u0131 d\u0259qiql\u0259\u015fdirin.<\/li>\n
          4. \u018fg\u0259r kompromis izl\u0259ri a\u015fkar edil\u0259rs\u0259, sad\u0259c\u0259 yenil\u0259m\u0259 il\u0259 kifay\u0259tl\u0259nm\u0259yin; b\u00fct\u00fcn idar\u0259etm\u0259 parollar\u0131n\u0131, API tokenl\u0259rini v\u0259 SD-WAN \u015f\u0259b\u0259k\u0259 daxili sertifikatlar\u0131n\u0131 (root CA \/ device certificates) yenil\u0259y\u0259r\u0259k yenid\u0259n qurun.<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"
            Cisco Catalyst SD-WAN Manager-d\u0259 Kritik T\u0259hl\u00fck\u0259sizlik B\u00f6hran\u0131: CVE-2026-76504 M\u00fcasir korporativ \u015f\u0259b\u0259k\u0259l\u0259rin m\u0259rk\u0259zi idar\u0259etm\u0259 s\u00fctunu hesab edil\u0259n Cisco Catalyst SD-WAN Manager (ke\u00e7mi\u015f vManage) proqram t\u0259minat\u0131nda CVSS \u015fkalas\u0131 \u00fczr\u0259 \u0259n y\u00fcks\u0259k t\u0259hl\u00fck\u0259lik d\u0259r\u0259c\u0259l\u0259rind\u0259n biri \u2014 9.8 bal il\u0259 qiym\u0259tl\u0259ndiril\u0259n kritik t\u0259hl\u00fck\u0259sizlik z\u0259ifliyi a\u015fkar edilmi\u015fdir. CVE-2026-76504 identifikatoru verilmi\u015f bu bo\u015fluq uzaqdan olan, autentifikasiyadan ke\u00e7m\u0259mi\u015f h\u00fccum\u00e7uya sistem \u00fcz\u0259rind\u0259 tam […]<\/p>\n","protected":false},"author":1,"featured_media":11254,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-11255","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"aioseo_notices":[],"jetpack_featured_media_url":"https:\/\/bitep.net\/blog\/wp-content\/uploads\/2026\/10\/cisco-sdwan-cve-2026-76504-1791072350125.jpg","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/posts\/11255","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/comments?post=11255"}],"version-history":[{"count":0,"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/posts\/11255\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/media\/11254"}],"wp:attachment":[{"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/media?parent=11255"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/categories?post=11255"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bitep.net\/blog\/wp-json\/wp\/v2\/tags?post=11255"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}