CISA Updates Emergency Directive on Cisco SD-WAN Vulnerabilities

03/11/2026 11:00 AM EST

CISA has released an update to Emergency Directive (ED) 26-03: Mitigate Vulnerabilities in Cisco Software-Defined Wide-Area Networking (SD-WAN) Systems that requires new actions and an additional reporting requirement for federal agencies running affected products.  

Federal Civilian Executive Branch (FCEB) agencies are directed to take additional actions outlined in the update involving Cisco SD-WAN systems on agency networks or hosted by third parties on an agency’s behalf.

Following completion of these actions, agencies are to report updates to CISA using the CISA provided template on the actions taken to provide logs to CISA via its Cloud Logging Aggregation Warehouse program. For assistance with this task, agencies should contact CLAWOperationsSupport@cisa.dhs.gov. 

CISA also updated its Supplemental Direction ED 26-03: Hunt and Hardening Guidance for Cisco SD-WAN Systems to provide prescriptive actions for FCEB agencies.