Critical Cisco SD-WAN Manager bug exploited, gives remote admin access

·3 views

Cisco disclosed a critical authentication bypass flaw in its Catalyst SD-WAN Manager software on September 30, 2026. The vulnerability, which carries a maximum severity rating, allows a remote attacker to gain administrative API access with a single unauthenticated request. Cisco confirmed the bug was actively exploited in September, leading U.S. cybersecurity authorities to immediately flag it for urgent patching. The issue stems from improper handling of URL encoding and affects all configurations of the software, with no available workaround.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Developer Creates Outdoor Game After AI Model Invented Facts About Photos

A developer tested a small local AI vision model by showing it pairs of photos from walks and asking how they were connected. In six out of ten test pairs, the model invented details or relationships that did not exist. In response, the developer built 'UNSEEN,' a walking game that uses the AI only to describe photos, not to judge them. The game's rules and a deterministic 'evidence gate' decide the validity of a player's observations, encouraging outdoor activity over screen time. The project was created for the Hacktoberfest Open-Source AI Challenge.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Study finds sensor constraints, not AI models, drive three earth observation projects

A review of three agricultural monitoring projects in Pakistan, Saudi Arabia, and the US reveals their designs prioritize sensor selection over AI model choice. These projects first consider legal, revisit frequency, and data ownership constraints rather than model accuracy. Two of the three projects explicitly launched with no AI model at all, focusing instead on data aggregation and reporting. The third project incorporated models only after ensuring their open licenses aligned with the system's requirements. In all cases, the sensing architecture was dictated by practical and legal necessities, not by algorithmic performance benchmarks.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

OpenAI research highlights risk of AI workflow errors in mandatory approvals

OpenAI, in an October 6 publication, detailed research on AI agents performing legal, commercial, and procurement tasks. Their study of 11 specific tasks found that relying on average performance scores can hide critical failures, such as a missed mandatory approval. For instance, a workflow could be mostly correct but still bypass a required financial sign-off for purchases over a set amount. The research underscores the engineering need to separate performance metrics from mandatory checks to ensure safety. A proposed solution involves a separate verification system that explicitly fails workflows if any mandatory check is not conclusively passed.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer details input handling system for cross-device game controls

A developer investigated input handling in the game VOLT NOMAD, focusing on supporting mouse, touch, and gamepad controls. The work, verified locally on September 11, 2026, involved testing gamepad direction conversion and button remapping in the Godot engine. The system routes input events to specific handlers for different game screens, such as combat or dialogue. The goal is to define consistent actions across devices, ensuring a single stick tilt or button press results in one intended action.

0 comments Read more at DEV Community