CVE-2026-16812 puts an on-premises SD-WAN management plane under pressure, where a single command injection bug could become a wide operational problem.