{"metadata": {"vulnerability": "CVE-2026-20127", "count": 237, "kinds": {"milestone": 9, "sighting": 183, "kev": 11, "other": 34}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0071", "record": "NCSC-2026-0071", "field": "document.tracking.generator.date"}, {"timestamp": "2025-10-08T11:59:15.379Z", "date_only": false, "value": "2025-10-08T11:59:15.379Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-20127", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-02-25T00:00:00Z", "date_only": false, "value": "2026-02-25T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2026-20127", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "0036be7f-5d6e-4585-9861-52a8e23b40b6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-25T00:00:00Z", "date_only": true, "value": "2026-02-25", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-20127", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2026-02-25T00:00:00Z", "date_only": true, "value": "2026-02-25", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2026-20127", "field": "evidence.0.details.date_added", "uuid": "0036be7f-5d6e-4585-9861-52a8e23b40b6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-25T00:00:00Z", "date_only": false, "value": "2026-02-25T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2026-20127", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "0036be7f-5d6e-4585-9861-52a8e23b40b6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-25T00:00:00Z", "date_only": false, "value": "2026-02-25T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0210", "record": "CERTFR-2026-AVI-0210", "field": "last_revision_date"}, {"timestamp": "2026-02-25T00:00:00Z", "date_only": true, "value": "2026-02-25", "kind": "milestone", "label": "Published", "source": "certfr_alerte \u00b7 CERTFR-2026-ALE-002", "record": "CERTFR-2026-ALE-002", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-02-25T00:00:00Z", "date_only": true, "value": "2026-02-25", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0210", "record": "CERTFR-2026-AVI-0210", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-02-25T00:00:00Z", "date_only": false, "value": "2026-02-25T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2026-ALE-002", "record": "CERTFR-2026-ALE-002", "field": "revisions.0.revision_date"}, {"timestamp": "2026-02-25T00:00:00Z", "date_only": false, "value": "2026-02-25T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0210", "record": "CERTFR-2026-AVI-0210", "field": "revisions.0.revision_date"}, {"timestamp": "2026-02-25T00:00:00Z", "date_only": false, "value": "2026-02-25T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2026-20127", "field": "status.status_updated_at", "uuid": "0036be7f-5d6e-4585-9861-52a8e23b40b6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-25T13:28:27Z", "date_only": false, "value": "2026-02-25T13:28:27.000000Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/cisco-security-advisory-av26-166", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "d243a731-8550-4024-b2e8-5d3cc16ab8e0", "url": "https://cyber.gc.ca/en/alerts-advisories/cisco-security-advisory-av26-166"}, {"timestamp": "2026-02-25T15:07:47Z", "date_only": false, "value": "2026-02-25T15:07:47.000000Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/al26-004-critical-vulnerability-affecting-cisco-catalyst-sd-wan-cve-2026-20127", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "c6c631a4-0d8b-46ee-853b-2086457201e1", "url": "https://cyber.gc.ca/en/alerts-advisories/al26-004-critical-vulnerability-affecting-cisco-catalyst-sd-wan-cve-2026-20127"}, {"timestamp": "2026-02-25T15:59:40Z", "date_only": false, "value": "2026-02-25T15:59:40+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-SDWAN-RPA-EHCHTZK", "record": "CISCO-SA-SDWAN-RPA-EHCHTZK", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-02-25T16:00:00Z", "date_only": false, "value": "2026-02-25T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-SDWAN-RPA-EHCHTZK", "record": "CISCO-SA-SDWAN-RPA-EHCHTZK", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-02-25T16:00:00Z", "date_only": false, "value": "2026-02-25T16:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_cisco \u00b7 CISCO-SA-SDWAN-RPA-EHCHTZK", "record": "CISCO-SA-SDWAN-RPA-EHCHTZK", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-02-25T16:10:24Z", "date_only": false, "value": "2026-02-25T16:10:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/news-events/joint-guidance-malicious-cyber-threats-sd-wan-networks", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "32c9207f-cf13-4b66-bf60-d036dfb15a34", "url": "https://cyber.gc.ca/en/news-events/joint-guidance-malicious-cyber-threats-sd-wan-networks"}, {"timestamp": "2026-02-25T16:11:09Z", "date_only": false, "value": "2026-02-25T16:11:09.000000Z", "kind": "sighting", "label": "Seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0071", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "69816d54-9901-4aa4-99d2-51af28378b02", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0071"}, {"timestamp": "2026-02-25T16:14:20.137Z", "date_only": false, "value": "2026-02-25T16:14:20.137Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-20127", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-02-25T16:29:05Z", "date_only": false, "value": "2026-02-25T16:29:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/rilevato-sfruttamento-di-vulnerabilita-in-prodotti-cisco", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "c67abb80-1b33-40f8-83b6-0c5784f6b6e3", "url": "https://www.acn.gov.it/portale/w/rilevato-sfruttamento-di-vulnerabilita-in-prodotti-cisco"}, {"timestamp": "2026-02-25T17:00:01Z", "date_only": false, "value": "2026-02-25T17:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2026-20127", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "0036be7f-5d6e-4585-9861-52a8e23b40b6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-25T17:00:01.984Z", "date_only": false, "value": "2026-02-25T17:00:01.984798Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0036be7f-5d6e-4585-9861-52a8e23b40b6", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "b174acc1-abd2-4127-a7d0-55b792e17af7", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0036be7f-5d6e-4585-9861-52a8e23b40b6", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-02-25T17:00:07.512Z", "date_only": false, "value": "2026-02-25T17:00:07.512659Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cert-fr.bsky.social/post/3mfp5rpezz52n", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "728c07e6-d280-4392-ac80-7a343bf5aba7", "url": "https://bsky.app/profile/cert-fr.bsky.social/post/3mfp5rpezz52n"}, {"timestamp": "2026-02-25T17:00:08.566Z", "date_only": false, "value": "2026-02-25T17:00:08.566149Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mfp5rtagrx26", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "8c236e19-3f32-4f98-a557-cd3673446096", "url": "https://bsky.app/profile/o2cloud.bsky.social/post/3mfp5rtagrx26"}, {"timestamp": "2026-02-25T17:02:07.141Z", "date_only": false, "value": "2026-02-25T17:02:07.141756Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mfp5vfde3m2a", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "169fc9f8-440b-4556-9148-99af207f6b15", "url": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mfp5vfde3m2a"}, {"timestamp": "2026-02-25T17:11:09.013Z", "date_only": false, "value": "2026-02-25T17:11:09.013125Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0071", "record": "NCSC-2026-0071", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-02-25T17:11:09.013Z", "date_only": false, "value": "2026-02-25T17:11:09.013125Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0071", "record": "NCSC-2026-0071", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-02-25T17:25:29Z", "date_only": false, "value": "2026-02-25T17:25:29Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-P4CQ-46Q3-JR7W", "record": "GHSA-P4CQ-46Q3-JR7W", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-02-25T17:25:29.477Z", "date_only": false, "value": "2026-02-25T17:25:29.477", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-20127", "record": "FKIE_CVE-2026-20127", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-02-25T17:29:39.224Z", "date_only": false, "value": "2026-02-25T17:29:39.224822Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mfp7dlny7p62", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "7d6ae1fa-56dc-4579-a183-73cbd4d3fd72", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mfp7dlny7p62"}, {"timestamp": "2026-02-25T17:53:52.295Z", "date_only": false, "value": "2026-02-25T17:53:52.295307Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfparwe47r25", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "2eab425a-1bfc-4e5c-9152-a5f0ca767093", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfparwe47r25"}, {"timestamp": "2026-02-25T18:02:07.340Z", "date_only": false, "value": "2026-02-25T18:02:07.340824Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3mfpbaoag5u2z", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "d9d149ac-f53b-444c-b1c7-ad470263f400", "url": "https://bsky.app/profile/bleepingcomputer.com/post/3mfpbaoag5u2z"}, {"timestamp": "2026-02-25T18:03:47.412Z", "date_only": false, "value": "2026-02-25T18:03:47.412857Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mfpbdo54if24", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "126d18dd-7f91-4e44-a336-3f4cbe9b9ba3", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3mfpbdo54if24"}, {"timestamp": "2026-02-25T18:18:35.589Z", "date_only": false, "value": "2026-02-25T18:18:35.589688Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mfpc65cgz52n", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "761eefee-665b-4696-87a6-c96d9cf5a4db", "url": "https://bsky.app/profile/postac001.bsky.social/post/3mfpc65cgz52n"}, {"timestamp": "2026-02-25T18:31:38Z", "date_only": false, "value": "2026-02-25T18:31:38Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-P4CQ-46Q3-JR7W", "record": "GHSA-P4CQ-46Q3-JR7W", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-02-25T18:31:38Z", "date_only": false, "value": "2026-02-25T18:31:38Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-P4CQ-46Q3-JR7W", "record": "GHSA-P4CQ-46Q3-JR7W", "field": "modified"}, {"timestamp": "2026-02-25T18:34:56.282Z", "date_only": false, "value": "2026-02-25T18:34:56.282611Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mfpd3ekl4i2a", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "9f842831-8a2a-48f2-bd9f-bb56550c6562", "url": "https://bsky.app/profile/infosecbot.bsky.social/post/3mfpd3ekl4i2a"}, {"timestamp": "2026-02-25T18:43:06Z", "date_only": false, "value": "2026-02-25T18:43:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/kriittisia-haavoittuvuuksia-cisco-catalyst-sd-wan-tuotteissa", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "c5df6229-08e4-4653-92b4-3107b493a5b6", "url": "https://www.kyberturvallisuuskeskus.fi/fi/kriittisia-haavoittuvuuksia-cisco-catalyst-sd-wan-tuotteissa"}, {"timestamp": "2026-02-25T19:26:43Z", "date_only": false, "value": "2026-02-25T19:26:43.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cert.si/si-cert-2026-01/", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "46ee6460-5009-4360-9b11-4278ba0f7b92", "url": "https://www.cert.si/si-cert-2026-01/"}, {"timestamp": "2026-02-25T20:00:30.689Z", "date_only": false, "value": "2026-02-25T20:00:30.689670Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/fi-uutiset.bsky.social/post/3mfphufjwg52e", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "4f65b9c6-b7e9-4455-914b-e3a2086074a4", "url": "https://bsky.app/profile/fi-uutiset.bsky.social/post/3mfphufjwg52e"}, {"timestamp": "2026-02-25T20:02:11.525Z", "date_only": false, "value": "2026-02-25T20:02:11.525655Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mfphxevftg23", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "25cee1c6-73a1-4cdb-92fb-6f39b26aee5e", "url": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mfphxevftg23"}, {"timestamp": "2026-02-25T20:13:08.824Z", "date_only": false, "value": "2026-02-25T20:13:08.824995Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mfpikpurmdi2", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "53232e37-fbb1-432c-96b2-ebea1575fa4f", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mfpikpurmdi2"}, {"timestamp": "2026-02-25T21:39:59.352Z", "date_only": false, "value": "2026-02-25T21:39:59.352669Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mfpngbjswq2k", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "4c2f05c2-569a-4364-90b5-41b9550e0673", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mfpngbjswq2k"}, {"timestamp": "2026-02-25T22:31:52.916Z", "date_only": false, "value": "2026-02-25T22:31:52.916767Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mfpqd272so2j", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "ea4f0ad6-d192-40f1-88d2-eb213d473af2", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3mfpqd272so2j"}, {"timestamp": "2026-02-25T22:33:47.569Z", "date_only": false, "value": "2026-02-25T22:33:47.569948Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mfpqgian6s27", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "90311201-19c9-45d5-a0ec-f6fcde329329", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3mfpqgian6s27"}, {"timestamp": "2026-02-25T23:00:00Z", "date_only": false, "value": "2026-02-25T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0516", "record": "WID-SEC-W-2026-0516", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-02-25T23:00:00Z", "date_only": false, "value": "2026-02-25T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0516", "record": "WID-SEC-W-2026-0516", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-02-25T23:00:00Z", "date_only": false, "value": "2026-02-25T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0516", "record": "WID-SEC-W-2026-0516", "field": "vulnerabilities.5.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-02-26T00:00:00Z", "date_only": false, "value": "2026-02-26T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2026-ALE-002", "record": "CERTFR-2026-ALE-002", "field": "revisions.1.revision_date"}, {"timestamp": "2026-02-26T01:09:42.805Z", "date_only": false, "value": "2026-02-26T01:09:42.805803Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newsanalysis.com/post/3mfpz5bsqer2d", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "afbf9c8e-070a-4c89-b78d-6485cab6d9ee", "url": "https://bsky.app/profile/newsanalysis.com/post/3mfpz5bsqer2d"}, {"timestamp": "2026-02-26T02:05:32.694Z", "date_only": false, "value": "2026-02-26T02:05:32.694409Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mfq4b4q32s24", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "a8408825-92a8-43c9-8577-cf7a6e7fe75d", "url": "https://bsky.app/profile/shiojiri.com/post/3mfq4b4q32s24"}, {"timestamp": "2026-02-26T02:28:36.124Z", "date_only": false, "value": "2026-02-26T02:28:36.124508Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mfq5kdwnho2j", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "1830db85-dd9a-4f49-9535-d9936b15304f", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mfq5kdwnho2j"}, {"timestamp": "2026-02-26T04:00:00Z", "date_only": false, "value": "2026-02-26T04:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1776", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "c4424bfd-c859-4e36-9165-4768ef11fb5f", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1776"}, {"timestamp": "2026-02-26T04:55:54.782Z", "date_only": false, "value": "2026-02-26T04:55:54.782171Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-20127", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-02-26T04:55:54.782Z", "date_only": false, "value": "2026-02-26T04:55:54.782171Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-20127", "record": "FKIE_CVE-2026-20127", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-02-26T05:13:00Z", "date_only": false, "value": "2026-02-26T05:13:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2026/02/cisco-sd-wan-zero-day-cve-2026-20127.html", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "0132e2cf-4ff2-4516-86f7-2f596ff92e0a", "url": "https://thehackernews.com/2026/02/cisco-sd-wan-zero-day-cve-2026-20127.html"}, {"timestamp": "2026-02-26T06:18:14Z", "date_only": false, "value": "2026-02-26T06:18:14.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/8491", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "d5fcf717-3825-48ee-8874-c7e5e8b4dfd0", "content": "\ud83d\udea8 Cisco is warning of active exploitation of a CVSS 10.0 flaw in Catalyst SD-WAN controllers.\n\nCVE-2026-20127 lets unauthenticated attackers bypass auth and gain admin access. Exploitation tied to UAT-8616 dates back to 2023, including rogue peers in the control plane and root escalation.\n\n\ud83d\udd17 Read \u2192 https://thehackernews.com/2026/02/cisco-sd-wan-zero-day-cve-2026-20127.html", "url": "https://t.me/thehackernews/8491", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-02-26T06:21:13.858Z", "date_only": false, "value": "2026-02-26T06:21:13.858626Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/softfantw.bsky.social/post/3mfqkkag6wc2z", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "1ae412f2-c3ea-4f54-9dff-3a2a8033ba8b", "url": "https://bsky.app/profile/softfantw.bsky.social/post/3mfqkkag6wc2z"}, {"timestamp": "2026-02-26T06:26:19.768Z", "date_only": false, "value": "2026-02-26T06:26:19.768670Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/it4intserver.bsky.social/post/3mfqktfozdg2f", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "b740055e-6573-46bc-8ada-1be2fe6211bb", "url": "https://bsky.app/profile/it4intserver.bsky.social/post/3mfqktfozdg2f"}, {"timestamp": "2026-02-26T06:30:25.213Z", "date_only": false, "value": "2026-02-26T06:30:25.213421Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mfql2qspec2b", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "d581e002-8539-4eaf-9fc3-a74e8ace2724", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mfql2qspec2b"}, {"timestamp": "2026-02-26T06:31:24.009Z", "date_only": false, "value": "2026-02-26T06:31:24.009014Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mfql3vhiast2", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "4177a2da-b0b0-4862-a4ed-5e11d08ed32e", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mfql3vhiast2"}, {"timestamp": "2026-02-26T06:31:37.632Z", "date_only": false, "value": "2026-02-26T06:31:37.632728Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mfql4vdthl2b", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "c15be1b0-82ec-46fa-94c7-a88736245819", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mfql4vdthl2b"}, {"timestamp": "2026-02-26T06:33:09.515Z", "date_only": false, "value": "2026-02-26T06:33:09.515239Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ninjaowl.ai/post/3mfql7itsyd2a", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "95e03faf-e6b6-481a-8aad-8e4b27058544", "url": "https://bsky.app/profile/ninjaowl.ai/post/3mfql7itsyd2a"}, {"timestamp": "2026-02-26T06:34:44Z", "date_only": false, "value": "2026-02-26T06:34:44.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ctinow/246301", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "3270fc0b-60cf-40e7-ba8f-5d35f4cf62ac", "content": "Cisco SD-WAN Zero-Day CVE-2026-20127 Exploited Since 2023 for Admin Access\nhttps://ift.tt/ek1ufdY", "url": "https://t.me/ctinow/246301", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-02-26T06:43:27.968Z", "date_only": false, "value": "2026-02-26T06:43:27.968248Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersecurity0001.bsky.social/post/3mfqls34agg2q", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "20251d70-70b1-4ab1-b96e-8e6a974e46b7", "url": "https://bsky.app/profile/cybersecurity0001.bsky.social/post/3mfqls34agg2q"}, {"timestamp": "2026-02-26T07:23:21.031Z", "date_only": false, "value": "2026-02-26T07:23:21.031794Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mfqnzeqduk24", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "af5a04c9-ec34-4b7d-903f-04afb744ad18", "url": "https://bsky.app/profile/shiojiri.com/post/3mfqnzeqduk24"}, {"timestamp": "2026-02-26T07:45:00Z", "date_only": false, "value": "2026-02-26T07:45:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cert.se/2026/02/kritisk-nolldagssarbarhet-i-cisco-catalyst-sd-wan.html", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "a4e2a6d3-2a83-4ee4-afe3-49213e55bc86", "url": "https://www.cert.se/2026/02/kritisk-nolldagssarbarhet-i-cisco-catalyst-sd-wan.html"}, {"timestamp": "2026-02-26T08:03:56.562Z", "date_only": false, "value": "2026-02-26T08:03:56.562421Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mfqqbxuwxr27", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "8014c673-18fa-4e4a-a269-2b1f3f0bbb5f", "url": "https://bsky.app/profile/postac001.bsky.social/post/3mfqqbxuwxr27"}, {"timestamp": "2026-02-26T09:32:58.378Z", "date_only": false, "value": "2026-02-26T09:32:58.378561Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mfqvb5ztz22v", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "74ec847a-b4f4-4317-b944-d34112d2be10", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mfqvb5ztz22v"}, {"timestamp": "2026-02-26T10:34:36.800Z", "date_only": false, "value": "2026-02-26T10:34:36.800103Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/anssi-fr.bsky.social/post/3mfqyp5jzys2p", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "702d79f3-8cc4-4a9c-be28-252d268c914a", "url": "https://bsky.app/profile/anssi-fr.bsky.social/post/3mfqyp5jzys2p"}, {"timestamp": "2026-02-26T11:46:58.011Z", "date_only": false, "value": "2026-02-26T11:46:58.011927Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mfr4qs4vas2s", "record": "cve-2026-20127", "field": "creation_timestamp", "uuid": "6fed7373-5f23-4ad5-b94a-fdfa1423be39", "url": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mfr4qs4vas2s"}, {"timestamp": "2026-02-26T11:58:53Z", "date_only": false, "value": "2026-02-26T11:58:53.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cert.at/de/warnungen/2026/2/kritische-sicherheitslucken-in-cisco-catalyst-sd-wan-aktiv-ausgenutzt-updates-verfugbar", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "1e0d6a33-9e87-43de-9c08-8647b2bb81ea", "url": "https://www.cert.at/de/warnungen/2026/2/kritische-sicherheitslucken-in-cisco-catalyst-sd-wan-aktiv-ausgenutzt-updates-verfugbar"}, {"timestamp": "2026-02-26T12:00:07Z", "date_only": false, "value": "2026-02-26T12:00:07.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/7945", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "3fb4810e-0da0-4d40-9ec8-b2c056a34d54", "content": "Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 Cisco Catalyst SD-WAN \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 0-day, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u044b \u0438 \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0443\u0437\u043b\u044b \u0432 \u0446\u0435\u043b\u0435\u0432\u044b\u0435 \u0441\u0435\u0442\u0438.\n\nCVE-2026-20127 \u0438\u043c\u0435\u0435\u0442 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 10.0 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Cisco Catalyst SD-WAN Controller (\u0440\u0430\u043d\u0435\u0435 vSmart) \u0438 Cisco Catalyst SD-WAN Manager (\u0440\u0430\u043d\u0435\u0435 vManage) \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 SD-WAN-\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445.\n\n\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0410\u0432\u0441\u0442\u0440\u0430\u043b\u0438\u0439\u0441\u043a\u043e\u043c\u0443 \u0446\u0435\u043d\u0442\u0440\u0443 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0423\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0438\u0433\u043d\u0430\u043b\u043e\u0432 \u0410\u0432\u0441\u0442\u0440\u0430\u043b\u0438\u0438 (ASD's ACSC).\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0432 Cisco, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u043e\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u0440\u0438 \u043f\u0438\u0440\u0438\u043d\u0433\u0435 \u0432 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0432 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043e\u0439\u0442\u0438 \u0432 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 Cisco Catalyst SD-WAN \u043f\u043e\u0434 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441 \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438, \u043d\u0435 \u044f\u0432\u043b\u044f\u044e\u0449\u0435\u0433\u043e\u0441\u044f root-\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u044d\u0442\u0443 \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a NETCONF, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0435\u043c\u0443 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0435\u0439 SD-WAN-\u0441\u0435\u0442\u0438.\n\n\u0414\u043e\u0431\u0430\u0432\u0438\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0443\u0437\u0435\u043b, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432 \u0441\u0440\u0435\u0434\u0443 SD-WAN \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0431\u0443\u0434\u0435\u0442 \u0432\u044b\u0433\u043b\u044f\u0434\u0435\u0442\u044c \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u043c. \u0417\u0430\u0442\u0435\u043c \u043e\u043d\u043e \u0441\u043c\u043e\u0436\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u0438 \u043e\u0431\u044a\u044f\u0432\u043b\u044f\u0442\u044c \u0441\u0435\u0442\u0438, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u0443\u0442\u044c \u0433\u043b\u0443\u0431\u0436\u0435 \u0432 \u0441\u0435\u0442\u044c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Cisco Talos\u00a0\u0441\u043e\u043e\u043e\u0431\u0449\u0438\u043b\u0438, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a UAT-8616, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u043f\u043e \u0438\u0445 \u043e\u0446\u0435\u043d\u043a\u0430\u043c, \u0441 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u044c\u044e \u0443\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0430 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u0430 \u0432\u044b\u0441\u043e\u043a\u043e\u043a\u0432\u0430\u043b\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0442\u0435\u043b\u0435\u043c\u0435\u0442\u0440\u0438\u0438, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0432 2023 \u0433\u043e\u0434\u0443. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u043f\u0440\u0430\u0432\u0430 root, \u043e\u0442\u043a\u0430\u0442\u0438\u0432 \u041f\u041e \u0434\u043e \u0431\u043e\u043b\u0435\u0435 \u0441\u0442\u0430\u0440\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-20775\u00a0\u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f root-\u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0430 \u0437\u0430\u0442\u0435\u043c \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0432 \u0438\u0441\u0445\u043e\u0434\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438.\n\n\u041f\u043e\u0441\u043b\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0432\u0435\u0440\u043d\u0443\u0432\u0448\u0438\u0441\u044c \u043a \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u043c\u043e\u0433 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f, \u0438\u0437\u0431\u0435\u0436\u0430\u0432 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f. \u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u0431\u044b\u043b\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 Cisco \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e \u0441 \u0443\u043f\u043e\u043b\u043d\u043e\u043c\u043e\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u043e\u0440\u0433\u0430\u043d\u0430\u043c\u0438 \u0421\u0428\u0410 \u0438 \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438 (\u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f CISA \u0438 NCSC).\n\n\u0412 \u0438\u0445 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u043c \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442\u0441\u044f \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0442 Cisco Catalyst SD-WAN \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443, \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u044f \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0437\u043b\u044b, \u0430 \u0437\u0430\u0442\u0435\u043c \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f.\n\n\u0412 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u0445 \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u0438\u0432\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f SD-WAN \u043d\u0438 \u0432 \u043a\u043e\u0435\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043d\u0435 \u0434\u043e\u043b\u0436\u043d\u044b \u0431\u044b\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0432 \u0441\u0440\u043e\u0447\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0435\u0442\u0438 \u0438 \u0438\u0441\u043a\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043d\u043e\u0432\u044b\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0435 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u043c\u0438 \u043e\u0440\u0433\u0430\u043d\u0430\u043c\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u0438\u0440\u0438\u043d\u0433\u0430 \u0438 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 root, \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0430 \u043d\u0435 \u043f\u044b\u0442\u0430\u0442\u044c\u0441\u044f \u043e\u0447\u0438\u0441\u0442\u0438\u0442\u044c \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443.\n\nCisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u041f\u041e \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u0430\u044f\u0432\u043b\u044f\u044f \u043e\u0431 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0438 \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0440\u0435\u0448\u0438\u043b\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443.", "url": "https://t.me/true_secator/7945", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-02-26T12:00:13.096Z", "date_only": false, "value": "2026-02-26T12:00:13.096149Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mfr5ihrn6i2c", "record": "cve-2026-20127", "field": "creation_timestamp", "uuid": "9551266e-6f3e-4e16-ac0b-a4dba21136b7", "url": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mfr5ihrn6i2c"}, {"timestamp": "2026-02-26T13:03:35.288Z", "date_only": false, "value": "2026-02-26T13:03:35.288759Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mfrazs5nj223", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "b61f5c2f-4475-4e72-b44b-38f239e775f1", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mfrazs5nj223"}, {"timestamp": "2026-02-26T13:04:19.188Z", "date_only": false, "value": "2026-02-26T13:04:19.188567Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/technadu.com/post/3mfrb2oo3qs2g", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "fcff284c-4574-43e7-9c95-d1496d0cbbe5", "url": "https://bsky.app/profile/technadu.com/post/3mfrb2oo3qs2g"}, {"timestamp": "2026-02-26T13:04:19.844Z", "date_only": false, "value": "2026-02-26T13:04:19.844738Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/technadu.com/post/3mfrb33frnk2g", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "5650fd51-73b0-4b18-9073-84ba7f4a2e24", "url": "https://bsky.app/profile/technadu.com/post/3mfrb33frnk2g"}, {"timestamp": "2026-02-26T13:20:59.381Z", "date_only": false, "value": "2026-02-26T13:20:59.381204Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mfrbyuru3f26", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "3c09a7da-29ba-4eb6-aea1-310b92f29a60", "url": "https://bsky.app/profile/undercodenews.bsky.social/post/3mfrbyuru3f26"}, {"timestamp": "2026-02-26T13:32:40Z", "date_only": false, "value": "2026-02-26T13:32:40.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/9goXzQLN5OSKO5HSE3EBQffZaNbvkyWqB-PSb_jYm6mNEs9h", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "19836e42-3c34-454a-8074-648ac88f6e63", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-02-26T13:32:40Z", "date_only": false, "value": "2026-02-26T13:32:40.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/9goXzQLN5OSKO5HSE3EBQffZaNbvkyWqB-PSb_jYm6mNEs9h", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "47ba5c57-6189-4833-80f3-35d4d4164a29"}, {"timestamp": "2026-02-26T13:39:55.587Z", "date_only": false, "value": "2026-02-26T13:39:55.587547Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mfrd2fvim22w", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "a48dbb73-4ac7-498f-a0e0-95120d26d973", "url": "https://bsky.app/profile/basefortify.bsky.social/post/3mfrd2fvim22w"}, {"timestamp": "2026-02-26T13:39:57.369Z", "date_only": false, "value": "2026-02-26T13:39:57.369457Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mfrd2jvwxc2w", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "e5aff622-3d68-4883-a627-54b4a14c05e5", "url": "https://bsky.app/profile/basefortify.bsky.social/post/3mfrd2jvwxc2w"}, {"timestamp": "2026-02-26T13:39:59.027Z", "date_only": false, "value": "2026-02-26T13:39:59.027542Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mfrd2mvtcs2w", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "bc0fd695-c9fd-43ba-a9fb-4028c9fd9632", "url": "https://bsky.app/profile/basefortify.bsky.social/post/3mfrd2mvtcs2w"}, {"timestamp": "2026-02-26T14:31:30.957Z", "date_only": false, "value": "2026-02-26T14:31:30.957097Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mfrfwxbnex2r", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "08a82b96-6850-401a-bc31-14be936473be", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mfrfwxbnex2r"}, {"timestamp": "2026-02-26T14:38:31.215Z", "date_only": false, "value": "2026-02-26T14:38:31.215732Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/achraf-dh.bsky.social/post/3mfrgdi3v6k2w", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "6cc6089e-f2f6-47b3-90f7-3817f9a4d681", "url": "https://bsky.app/profile/achraf-dh.bsky.social/post/3mfrgdi3v6k2w"}, {"timestamp": "2026-02-26T14:44:06.050Z", "date_only": false, "value": "2026-02-26T14:44:06.050Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-20127", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-02-26T14:48:56.747Z", "date_only": false, "value": "2026-02-26T14:48:56.747719Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mfrgvxpbk7s2", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "eba6bf54-90f1-4df3-a6c1-826263e14ac9", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mfrgvxpbk7s2"}, {"timestamp": "2026-02-26T16:00:11.653Z", "date_only": false, "value": "2026-02-26T16:00:11.653994Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/guardian360.bsky.social/post/3mfrkvllqxh2n", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "6777bd44-b457-4274-908d-2ab3643cb075", "url": "https://bsky.app/profile/guardian360.bsky.social/post/3mfrkvllqxh2n"}, {"timestamp": "2026-02-26T16:49:06.310Z", "date_only": false, "value": "2026-02-26T16:49:06.310991Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/talosintelligence.com/post/3mfrnmxo33n2s", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "0edc1a38-ec51-4947-afc1-353489cf244b", "url": "https://bsky.app/profile/talosintelligence.com/post/3mfrnmxo33n2s"}, {"timestamp": "2026-02-26T16:52:12.807Z", "date_only": false, "value": "2026-02-26T16:52:12.807407Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mfrnsijd5me2", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "980ab38d-42bf-4d0c-a7a6-80270864fb4d", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mfrnsijd5me2"}, {"timestamp": "2026-02-26T17:00:16.659Z", "date_only": false, "value": "2026-02-26T17:00:16.659458Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfroazvcq52i", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "b4db17d5-910c-4edc-be34-083c711e5473", "url": "https://bsky.app/profile/cyberhub.blog/post/3mfroazvcq52i"}, {"timestamp": "2026-02-26T17:14:02.758Z", "date_only": false, "value": "2026-02-26T17:14:02.758234Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mfrozmn4kc23", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "caaa497b-0202-43a2-976f-5db0277994c1", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mfrozmn4kc23"}, {"timestamp": "2026-02-26T17:38:52Z", "date_only": false, "value": "2026-02-26T17:38:52.000000Z", "kind": "sighting", "label": "Seen", "source": "https://cert.europa.eu/publications/security-advisories/2026-002/", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "949021f6-3d8d-454a-bd6f-115b6fb43ea5", "url": "https://cert.europa.eu/publications/security-advisories/2026-002/"}, {"timestamp": "2026-02-26T17:56:26.753Z", "date_only": false, "value": "2026-02-26T17:56:26.753194Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/modat-io.bsky.social/post/3mfrrffgfvk2j", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "8f0a183c-2b99-42ae-99dd-5ec4d44a0832", "url": "https://bsky.app/profile/modat-io.bsky.social/post/3mfrrffgfvk2j"}, {"timestamp": "2026-02-26T18:42:04.227Z", "date_only": false, "value": "2026-02-26T18:42:04.227962Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mfrtwz67ei2l", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "1b329e6c-61bc-4801-a0e2-6af013315153", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3mfrtwz67ei2l"}, {"timestamp": "2026-02-26T18:52:13.975Z", "date_only": false, "value": "2026-02-26T18:52:13.975539Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sctocs.bsky.social/post/3mfruj3we7k2b", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "36757757-3b97-4423-9730-2cd2d4757fc2", "url": "https://bsky.app/profile/sctocs.bsky.social/post/3mfruj3we7k2b"}, {"timestamp": "2026-02-26T19:38:14.089Z", "date_only": false, "value": "2026-02-26T19:38:14.089465Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mfrx3hitbc23", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "009d20d5-d459-4988-ba45-e135a93e2bca", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mfrx3hitbc23"}, {"timestamp": "2026-02-26T20:45:56Z", "date_only": false, "value": "2026-02-26T20:45:56.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.darkreading.com/vulnerabilities-threats/cisco-sd-wan-zero-day-exploitation-3-years", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "3ac4647a-831c-47b5-97aa-fe7d0bbf0717", "url": "https://www.darkreading.com/vulnerabilities-threats/cisco-sd-wan-zero-day-exploitation-3-years"}, {"timestamp": "2026-02-26T21:59:12.026Z", "date_only": false, "value": "2026-02-26T21:59:12.026379Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mfs6xjzw6d2x", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "c1b06f65-7537-4804-8934-9e9a3a3ea91f", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3mfs6xjzw6d2x"}, {"timestamp": "2026-02-26T22:05:48.080Z", "date_only": false, "value": "2026-02-26T22:05:48.080868Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/davimuir.bsky.social/post/3mfs7dc7wwc2m", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "e5b300fd-95ce-4be1-826c-26270c3a7e96", "url": "https://bsky.app/profile/davimuir.bsky.social/post/3mfs7dc7wwc2m"}, {"timestamp": "2026-02-27T00:00:00Z", "date_only": true, "value": "2026-02-27", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2026-20127", "field": "evidence.0.details.due_date", "uuid": "0036be7f-5d6e-4585-9861-52a8e23b40b6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-27T00:41:24Z", "date_only": false, "value": "2026-02-27T00:41:24+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-SDWAN-RPA-EHCHTZK", "record": "CISCO-SA-SDWAN-RPA-EHCHTZK", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-02-27T01:01:07.381Z", "date_only": false, "value": "2026-02-27T01:01:07.381901Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newsnexttech.bsky.social/post/3mfsj4tisrv2l", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "7f3dcc3d-b798-414a-9b5f-44480d5dc07f", "url": "https://bsky.app/profile/newsnexttech.bsky.social/post/3mfsj4tisrv2l"}, {"timestamp": "2026-02-27T01:01:25.466Z", "date_only": false, "value": "2026-02-27T01:01:25.466994Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/monikawalker.bsky.social/post/3mfsj5fh2br2d", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "6537d38b-3617-4ea0-9121-381ef006ce5e", "url": "https://bsky.app/profile/monikawalker.bsky.social/post/3mfsj5fh2br2d"}, {"timestamp": "2026-02-27T02:09:45.083Z", "date_only": false, "value": "2026-02-27T02:09:45.083954Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mfsmxkdhbc23", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "d2034b7a-0f3f-42b6-a8e6-0e82107d26d8", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mfsmxkdhbc23"}, {"timestamp": "2026-02-27T02:28:30.275Z", "date_only": false, "value": "2026-02-27T02:28:30.275350Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mfsnz46cby2k", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "52faeed6-da26-449b-92c0-21cb1119ccc1", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mfsnz46cby2k"}, {"timestamp": "2026-02-27T04:05:31.612Z", "date_only": false, "value": "2026-02-27T04:05:31.612036Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mfstglgdpw22", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "a79745a2-8900-423c-b01b-04116a91ccbf", "url": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mfstglgdpw22"}, {"timestamp": "2026-02-27T05:13:26.363Z", "date_only": false, "value": "2026-02-27T05:13:26.363548Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mfsx7znman23", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "19aa6baa-1bec-405f-8f66-f853a56ebd86", "url": "https://bsky.app/profile/opsmatters.com/post/3mfsx7znman23"}, {"timestamp": "2026-02-27T05:55:26.121Z", "date_only": false, "value": "2026-02-27T05:55:26.121624Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mfszl454p224", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "2069b3a8-d3ad-4d34-addf-b855a5a7acc5", "url": "https://bsky.app/profile/opsmatters.com/post/3mfszl454p224"}, {"timestamp": "2026-02-27T05:57:56.935Z", "date_only": false, "value": "2026-02-27T05:57:56.935221Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mfszpmhsjc23", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "7717bc58-42f1-4fe5-b3bd-ed75582cfb35", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mfszpmhsjc23"}, {"timestamp": "2026-02-27T08:50:22.745Z", "date_only": false, "value": "2026-02-27T08:50:22.745366Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mftddx3cby2i", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "d91bcca8-7c8c-4513-854e-21474ac5465e", "url": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mftddx3cby2i"}, {"timestamp": "2026-02-27T13:15:00Z", "date_only": false, "value": "2026-02-27T13:15:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cert.se/2026/02/cert-se-veckobrev-v9.html", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "ceb5bae7-7912-4e25-af7b-748ef384f554", "url": "https://www.cert.se/2026/02/cert-se-veckobrev-v9.html"}, {"timestamp": "2026-02-27T15:30:09.301Z", "date_only": false, "value": "2026-02-27T15:30:09.301386Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mftzornjei2m", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "8a05bd52-639e-42ca-bb34-a242de586b63", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3mftzornjei2m"}, {"timestamp": "2026-02-27T16:52:01.563Z", "date_only": false, "value": "2026-02-27T16:52:01.563578Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mfu6b6jpe22e", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "ae721069-3420-4568-9cae-4f21c294757f", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mfu6b6jpe22e"}, {"timestamp": "2026-02-27T17:57:03.589Z", "date_only": false, "value": "2026-02-27T17:57:03.589178Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mfubvhpgtm2l", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "0852d9a6-81e9-4d07-b35b-046a4c44012a", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3mfubvhpgtm2l"}, {"timestamp": "2026-02-27T18:18:57.338Z", "date_only": false, "value": "2026-02-27T18:18:57.338107Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mfud4ndxih2o", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "96900110-4678-4100-a222-16a28e1bb024", "url": "https://bsky.app/profile/opsmatters.com/post/3mfud4ndxih2o"}, {"timestamp": "2026-02-27T21:19:41.309Z", "date_only": false, "value": "2026-02-27T21:19:41.309099Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mfun7sx6st2v", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "cc919a84-5ae5-45c7-98f6-42449985d75b", "url": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mfun7sx6st2v"}, {"timestamp": "2026-02-28T00:32:23.284Z", "date_only": false, "value": "2026-02-28T00:32:23.284501Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/techimo.bsky.social/post/3mfuxyepd3u2e", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "23401927-756c-4d38-9159-dcaef353847c", "url": "https://bsky.app/profile/techimo.bsky.social/post/3mfuxyepd3u2e"}, {"timestamp": "2026-02-28T02:28:00.930Z", "date_only": false, "value": "2026-02-28T02:28:00.930598Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mfv6h5jeby2p", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "87d19942-938d-4d47-97ed-ac4106866cf2", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mfv6h5jeby2p"}, {"timestamp": "2026-03-01T02:29:07.505Z", "date_only": false, "value": "2026-03-01T02:29:07.505268Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mfxoxwyp2j2p", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "5aa59f3c-1eb8-4d0e-8511-532f6d0d6bff", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mfxoxwyp2j2p"}, {"timestamp": "2026-03-01T07:11:19.241Z", "date_only": false, "value": "2026-03-01T07:11:19.241966Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/tecno-times.bsky.social/post/3mfy6ql7f622h", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "183dafe8-3d2f-4ba6-93b3-4f85b220b890", "url": "https://bsky.app/profile/tecno-times.bsky.social/post/3mfy6ql7f622h"}, {"timestamp": "2026-03-01T09:24:10.553Z", "date_only": false, "value": "2026-03-01T09:24:10.553604Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/tecno-times.bsky.social/post/3mfyg63ontk2e", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "ed0d173a-2058-4634-85aa-b9c4b5f2f8d9", "url": "https://bsky.app/profile/tecno-times.bsky.social/post/3mfyg63ontk2e"}, {"timestamp": "2026-03-01T16:32:28.634Z", "date_only": false, "value": "2026-03-01T16:32:28.634657Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pwrdbyrog.bsky.social/post/3mfz63wfewk2t", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "d0eddd0f-9eed-44db-8791-ceffc4cd180e", "url": "https://bsky.app/profile/pwrdbyrog.bsky.social/post/3mfz63wfewk2t"}, {"timestamp": "2026-03-02T02:28:23.522Z", "date_only": false, "value": "2026-03-02T02:28:23.522210Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mg27fnxhiz2w", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "6ad2899c-479d-49be-957f-6db18335d778", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mg27fnxhiz2w"}, {"timestamp": "2026-03-02T04:14:46.673Z", "date_only": false, "value": "2026-03-02T04:14:46.673530Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mg2fdqjin22i", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "5876f9f8-309e-48ab-9cc4-cbe3f23ba496", "url": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mg2fdqjin22i"}, {"timestamp": "2026-03-02T21:12:53.835Z", "date_only": false, "value": "2026-03-02T21:12:53.835466Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mg46acnf222a", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "bf97ae41-043f-4c2b-8496-5efdc1c79efb", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mg46acnf222a"}, {"timestamp": "2026-03-02T21:14:48.758Z", "date_only": false, "value": "2026-03-02T21:14:48.758380Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mg46dqa4uc2a", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "d74236d2-ef0d-4058-88c8-aed6a5881eba", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mg46dqa4uc2a"}, {"timestamp": "2026-03-02T21:18:00.201Z", "date_only": false, "value": "2026-03-02T21:18:00.201183Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mg46jjn4dc2a", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "25f68ffd-99a5-4ebb-bfdc-f6579974892b", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mg46jjn4dc2a"}, {"timestamp": "2026-03-03T00:38:56Z", "date_only": false, "value": "2026-03-03T00:38:56+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-SDWAN-RPA-EHCHTZK", "record": "CISCO-SA-SDWAN-RPA-EHCHTZK", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-03-03T01:00:21.919Z", "date_only": false, "value": "2026-03-03T01:00:21.919455Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mg4kx6nzwy2h", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "ac5c5037-f11c-4ecd-9fb3-044f78e72a93", "url": "https://bsky.app/profile/opsmatters.com/post/3mg4kx6nzwy2h"}, {"timestamp": "2026-03-03T02:28:46.367Z", "date_only": false, "value": "2026-03-03T02:28:46.367046Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mg4pvaxwfa2w", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "431756f1-83f6-4000-86a1-5c7128a41c7c", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mg4pvaxwfa2w"}, {"timestamp": "2026-03-03T04:33:22.793Z", "date_only": false, "value": "2026-03-03T04:33:22.793546Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mg4wu355dw2l", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "079834b4-bd35-4a53-837d-5ff5a1ad4bd5", "url": "https://bsky.app/profile/opsmatters.com/post/3mg4wu355dw2l"}, {"timestamp": "2026-03-03T13:42:11.283Z", "date_only": false, "value": "2026-03-03T13:42:11.283488Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/jbhall56/statuses/116165530800383310", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "96bccbc8-f198-4fc4-a866-7cf31209fe1c", "url": "https://infosec.exchange/users/jbhall56/statuses/116165530800383310"}, {"timestamp": "2026-03-03T13:42:23.059Z", "date_only": false, "value": "2026-03-03T13:42:23.059527Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3mg5vjotxuc2h", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "84f6f16b-0355-4cf0-b3e7-8347471dfb06", "url": "https://bsky.app/profile/jbhall56.bsky.social/post/3mg5vjotxuc2h"}, {"timestamp": "2026-03-03T16:23:06.646Z", "date_only": false, "value": "2026-03-03T16:23:06.646971Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/i2develop.bsky.social/post/3mg66j2gq4z2h", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "94e5484f-fca8-4004-afc5-6038f23dd7e4", "url": "https://bsky.app/profile/i2develop.bsky.social/post/3mg66j2gq4z2h"}, {"timestamp": "2026-03-03T16:48:04.112Z", "date_only": false, "value": "2026-03-03T16:48:04.112310Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mg67vr5ygg2m", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "85904fc2-84ff-4d79-9741-a3953984d8ee", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3mg67vr5ygg2m"}, {"timestamp": "2026-03-03T17:23:54.463Z", "date_only": false, "value": "2026-03-03T17:23:54.463438Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvedatabase.bsky.social/post/3mg6bvv7fjs27", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "640332de-3706-4c46-8fbb-2b0f8f5a57bb", "url": "https://bsky.app/profile/cvedatabase.bsky.social/post/3mg6bvv7fjs27"}, {"timestamp": "2026-03-03T18:31:44.480Z", "date_only": false, "value": "2026-03-03T18:31:44.480054Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mg6fp65ktq2i", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "5d78b55b-075a-4c7d-a97e-198681b037a4", "url": "https://bsky.app/profile/undercode.bsky.social/post/3mg6fp65ktq2i"}, {"timestamp": "2026-03-03T18:37:55.375Z", "date_only": false, "value": "2026-03-03T18:37:55.375141Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/AAKL/statuses/116166693676891309", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "07d03a15-9a22-4be9-9a2e-05022e5edc59", "url": "https://infosec.exchange/users/AAKL/statuses/116166693676891309"}, {"timestamp": "2026-03-03T21:17:46.585Z", "date_only": false, "value": "2026-03-03T21:17:46.585951Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mg6oy27srs2l", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "7c23845b-3d4e-4747-98a2-495a74243170", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mg6oy27srs2l"}, {"timestamp": "2026-03-03T21:19:05.934Z", "date_only": false, "value": "2026-03-03T21:19:05.934404Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mg6p2gbxec2l", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "83d05743-9a51-432f-ac33-ddad7ceb49f3", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mg6p2gbxec2l"}, {"timestamp": "2026-03-03T21:29:33.164Z", "date_only": false, "value": "2026-03-03T21:29:33.164822Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mg6pmxutcc2l", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "b4fc3501-4dc5-4001-a21c-8f04e2dffcc0", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mg6pmxutcc2l"}, {"timestamp": "2026-03-03T21:32:02.063Z", "date_only": false, "value": "2026-03-03T21:32:02.063596Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mg6prb7zrs2l", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "ed2f1685-15c6-43a3-8509-baa18cc9e645", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mg6prb7zrs2l"}, {"timestamp": "2026-03-04T01:44:25.281Z", "date_only": false, "value": "2026-03-04T01:44:25.281639Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/5923021", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "28f5e9e8-7bc8-4740-9e88-d01d4ef29a41", "url": "https://feedsin.space/feed/CISAKevBot/items/5923021"}, {"timestamp": "2026-03-04T02:28:18.076Z", "date_only": false, "value": "2026-03-04T02:28:18.076031Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mg7addht2w2h", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "0f74f6c1-5176-4126-b7d4-69e493f35eec", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mg7addht2w2h"}, {"timestamp": "2026-03-04T10:45:02.584Z", "date_only": false, "value": "2026-03-04T10:45:02.584603Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvedatabase.bsky.social/post/3mga43l3b5y27", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "d783e9c8-f6fe-4a11-b087-cbf10485ecbe", "url": "https://bsky.app/profile/cvedatabase.bsky.social/post/3mga43l3b5y27"}, {"timestamp": "2026-03-04T16:08:30.218Z", "date_only": false, "value": "2026-03-04T16:08:30.218755Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mgao5xigfc2i", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "41d58234-7ccc-4839-9788-84aac19d10a8", "url": "https://bsky.app/profile/sergioiker.bsky.social/post/3mgao5xigfc2i"}, {"timestamp": "2026-03-04T23:00:00Z", "date_only": false, "value": "2026-03-04T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0516", "record": "WID-SEC-W-2026-0516", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-03-05T01:07:20.522Z", "date_only": false, "value": "2026-03-05T01:07:20.522444Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mgbmbiap6i27", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "77f6dad2-7905-40c5-ae4d-acaa446d468c", "url": "https://bsky.app/profile/infosecbot.bsky.social/post/3mgbmbiap6i27"}, {"timestamp": "2026-03-05T02:28:27.405Z", "date_only": false, "value": "2026-03-05T02:28:27.405934Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mgbqsk2slf2p", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "9ba896e0-20cd-49e6-b68e-8f2eeb9cd93b", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mgbqsk2slf2p"}, {"timestamp": "2026-03-05T04:16:28.174Z", "date_only": false, "value": "2026-03-05T04:16:28.174477Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mgbwtoel3w23", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "52d225bc-8b48-46f7-b898-f4248d2eaf6d", "url": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mgbwtoel3w23"}, {"timestamp": "2026-03-05T09:12:56.591Z", "date_only": false, "value": "2026-03-05T09:12:56.591340Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/firstpasslab.bsky.social/post/3mgchfscixn2r", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "5705d7eb-8239-4bc5-a403-12fc21e93dbe", "url": "https://bsky.app/profile/firstpasslab.bsky.social/post/3mgchfscixn2r"}, {"timestamp": "2026-03-05T09:13:23.961Z", "date_only": false, "value": "2026-03-05T09:13:23.961494Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/firstpasslab.bsky.social/post/3mgchgmoxkj2n", "record": "cve-2026-20127", "field": "creation_timestamp", "uuid": "dd599606-0580-4121-abce-5bd23e1f9c38", "url": "https://bsky.app/profile/firstpasslab.bsky.social/post/3mgchgmoxkj2n"}, {"timestamp": "2026-03-05T11:00:26.361Z", "date_only": false, "value": "2026-03-05T11:00:26.361417Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/lordman1982.bsky.social/post/3mgcnfzhx4v2n", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "c26a5a3a-d7ff-4b0a-9a27-14552c0201b2", "url": "https://bsky.app/profile/lordman1982.bsky.social/post/3mgcnfzhx4v2n"}, {"timestamp": "2026-03-05T13:46:57.040Z", "date_only": false, "value": "2026-03-05T13:46:57.040505Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mgcwpkdrnqh2", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "50b76359-2e6d-4c28-ab32-f68a33f972ed", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mgcwpkdrnqh2"}, {"timestamp": "2026-03-05T17:00:08Z", "date_only": false, "value": "2026-03-05T17:00:08.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/7969", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "7a0b7b5a-ab64-4fbb-83f5-1a607cca3af6", "content": "Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043d\u0430\u0447\u0430\u043b\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u0432\u043e\u043b\u043d\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0434\u0432\u0443\u0445 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Catalyst SD-WAN \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n25 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f\u00a0\u043f\u044f\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Catalyst SD-WAN, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root.\u00a0\n\n\u041f\u043e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044e \u043d\u0430 5 \u043c\u0430\u0440\u0442\u0430 Cisco \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u0441\u0432\u043e\u0435 \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0435 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u0432 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0435\u0439 \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0434\u0432\u0443\u0445 \u0438\u0437 \u043f\u044f\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439: CVE-2026-20128 \u0438 CVE-2026-20122.\n\n\u041f\u0435\u0440\u0432\u0430\u044f, CVE-2026-20128, - \u044d\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0430\u0433\u0435\u043d\u0442\u0430 \u0441\u0431\u043e\u0440\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 (DCA) \u0432 Catalyst SD-WAN Manager. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f DCA \u0432 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u0414\u0440\u0443\u0433\u0430\u044f, CVE-2026-20122, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u044d\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e API Catalyst SD-WAN Manager. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n\u0412 Cisco \u043f\u043e\u043a\u0430 \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u043e \u0432 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0438 \u0443\u043a\u0430\u0437\u0430\u043d\u043e, \u0447\u0442\u043e \u043e\u043d\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438.\n\n\u041d\u043e \u0441\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0441\u0442\u0430\u0442\u0443\u0441\u0430 \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u043e \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0434\u0435\u043b\u044e \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439\u00a00-day, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 Catalyst SD-WAN.\n\nCVE-2026-20127 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\u0422\u043e\u0433\u0434\u0430 CISA \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0430, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u044f\u043b\u0430\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0441 \u0431\u043e\u043b\u0435\u0435 \u0441\u0442\u0430\u0440\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e Catalyst, CVE-2022-20775, \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u0432 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nCisco Talos \u0441\u0432\u044f\u0437\u0430\u043b\u0430 \u044d\u0442\u0438 \u0430\u0442\u0430\u043a\u0438 \u0441 UAT-8616, \u043f\u0440\u043e\u0434\u0432\u0438\u043d\u0443\u0442\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u043c \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0441 2023 \u0433\u043e\u0434\u0430.\u00a0\u041d\u043e \u043d\u0435\u044f\u0441\u043d\u043e, \u0431\u044b\u043b\u0438 \u043b\u0438 \u0432\u0441\u0435 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Catalyst SD-WAN \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0432 \u043e\u0434\u043d\u043e\u0439 \u0438\u043b\u0438 \u0440\u0430\u0437\u043d\u044b\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u0445.\u00a0\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Cisco \u0442\u0430\u043a\u0436\u0435 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u043b\u0430 \u0430\u0442\u0430\u043a\u0438 \u0441 \u043d\u0443\u043b\u044f\u043c\u0438,\u00a0\u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043c\u044b\u043c\u0438 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0439 APT, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u043a\u0430\u043a UAT-9686. \u0412 \u043e\u0431\u0449\u0435\u043c, \u0431\u0443\u0434\u0435\u043c \u0441\u043b\u0435\u0434\u0438\u0442\u044c.", "url": "https://t.me/true_secator/7969", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-03-05T19:09:59.020Z", "date_only": false, "value": "2026-03-05T19:09:59.020312Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mgdircjam672", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "09821455-e062-405c-97ca-763f6b549ffd", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mgdircjam672"}, {"timestamp": "2026-03-05T19:16:18.077Z", "date_only": false, "value": "2026-03-05T19:16:18.077835Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mgdj4nh6p7u2", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "0f4d2679-f436-4092-b025-09c13419e1a1", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mgdj4nh6p7u2"}, {"timestamp": "2026-03-05T21:30:40.968Z", "date_only": false, "value": "2026-03-05T21:30:40.968966Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mgdqmmfetk2l", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "8f848bae-d3d9-419b-ac7a-0b8284396375", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mgdqmmfetk2l"}, {"timestamp": "2026-03-05T23:00:00Z", "date_only": false, "value": "2026-03-05T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0516", "record": "WID-SEC-W-2026-0516", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-03-06T02:28:30.711Z", "date_only": false, "value": "2026-03-06T02:28:30.711644Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mgebbklafa2p", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "e4c7a221-98b4-42f8-a659-07bb26cf866f", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mgebbklafa2p"}, {"timestamp": "2026-03-06T07:24:19.834Z", "date_only": false, "value": "2026-03-06T07:24:19.834138Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0071", "record": "NCSC-2026-0071", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-03-06T12:07:02.595Z", "date_only": false, "value": "2026-03-06T12:07:02.595940Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0071", "record": "NCSC-2026-0071", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-03-06T12:07:02.595Z", "date_only": false, "value": "2026-03-06T12:07:02.595940Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0071", "record": "NCSC-2026-0071", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-03-06T13:30:00Z", "date_only": false, "value": "2026-03-06T13:30:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cert.se/2026/03/cert-se-veckobrev-v10.html", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "dbd40b4b-b7ab-4cd8-bf58-5a842006c15c", "url": "https://www.cert.se/2026/03/cert-se-veckobrev-v10.html"}, {"timestamp": "2026-03-06T15:20:00Z", "date_only": false, "value": "2026-03-06T15:20:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.ncsc.nl/alerts/actief-misbruik-van-kwetsbaarheden-in-cisco-producten", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "a584c5a6-cfe1-4ba7-a19f-d67428ca3db3", "url": "https://www.ncsc.nl/alerts/actief-misbruik-van-kwetsbaarheden-in-cisco-producten"}, {"timestamp": "2026-03-06T15:20:06.443Z", "date_only": false, "value": "2026-03-06T15:20:06.443195Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/i2develop.bsky.social/post/3mgfmf7nljt2d", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "674b3002-1722-4b90-b6b3-174c9a430e53", "url": "https://bsky.app/profile/i2develop.bsky.social/post/3mgfmf7nljt2d"}, {"timestamp": "2026-03-06T21:26:26.893Z", "date_only": false, "value": "2026-03-06T21:26:26.893001Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mggaudhl3r2x", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "d5b4e1e1-de27-4e40-92cf-b228589666b9", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3mggaudhl3r2x"}, {"timestamp": "2026-03-07T17:30:09.604Z", "date_only": false, "value": "2026-03-07T17:30:09.604350Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mgie4qubmm2m", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "a3a4dcde-ba46-4714-b5a7-640a1206731d", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3mgie4qubmm2m"}, {"timestamp": "2026-03-08T15:51:38Z", "date_only": false, "value": "2026-03-08T15:51:38.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2026/03/08/recent-cisco-catalyst-sdwan-vulnerability.html", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "a5afd7c5-971d-4c2a-8864-b9ee17482caf", "url": "https://threatintel.cc/2026/03/08/recent-cisco-catalyst-sdwan-vulnerability.html"}, {"timestamp": "2026-03-08T16:51:32.397Z", "date_only": false, "value": "2026-03-08T16:51:32.397852Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/116194586920781883", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "211ab5ba-6a04-4c54-912c-127d77101f5d", "url": "https://infosec.exchange/users/edwardk/statuses/116194586920781883"}, {"timestamp": "2026-03-08T17:30:29Z", "date_only": false, "value": "2026-03-08T17:30:29.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/information_security_channel/54952", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "1d48665d-9003-4e26-b9d9-4b3d1392b48c", "content": "Recent Cisco Catalyst SD-WAN Vulnerability Now Widely Exploited\nhttps://www.securityweek.com/recent-cisco-catalyst-sd-wan-vulnerability-now-widely-exploited/\n\nWatchTowr reports seeing exploitation attempts for CVE-2026-20127 from numerous unique IP addresses.\nThe post Recent Cisco Catalyst SD-WAN Vulnerability Now Widely Exploited (https://www.securityweek.com/recent-cisco-catalyst-sd-wan-vulnerability-now-widely-exploited/) appeared first on SecurityWeek (https://www.securityweek.com/).", "url": "https://t.me/information_security_channel/54952", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-03-09T00:00:00Z", "date_only": false, "value": "2026-03-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-010/", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "da065eb0-23c5-4845-8241-65875dfd1296", "url": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-010/"}, {"timestamp": "2026-03-09T11:58:01.690Z", "date_only": false, "value": "2026-03-09T11:58:01.690108Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/technadu/statuses/116199095055564768", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "21f30753-a7a0-4ea1-9763-9822263a8341", "url": "https://infosec.exchange/users/technadu/statuses/116199095055564768"}, {"timestamp": "2026-03-10T00:38:46Z", "date_only": false, "value": "2026-03-10T00:38:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/realcodeb0ss/369", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "ca4f623f-420d-4535-b377-662d6f24bbf7", "content": "https://socprime.com/blog/cve-2026-20127-vulnerability/", "url": "https://t.me/realcodeb0ss/369", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-03-10T13:03:30.563Z", "date_only": false, "value": "2026-03-10T13:03:30.563452Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/jbhall56/statuses/116205014352045063", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "9ba8c4cc-4b6a-403a-ad4a-72f787f5ad17", "url": "https://infosec.exchange/users/jbhall56/statuses/116205014352045063"}, {"timestamp": "2026-03-12T09:24:51.548Z", "date_only": false, "value": "2026-03-12T09:24:51.548949Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mgu3dksmih2v", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "a7d1a485-d050-486b-b416-e6314520dcb5", "url": "https://bsky.app/profile/infosecbot.bsky.social/post/3mgu3dksmih2v"}, {"timestamp": "2026-03-13T11:55:32.236Z", "date_only": false, "value": "2026-03-13T11:55:32.236631Z", "kind": "sighting", "label": "Seen", "source": "https://mstdn.social/users/Hackread/statuses/116221734376880676", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "364eca48-dfce-4120-bb66-c54b91934f9a", "url": "https://mstdn.social/users/Hackread/statuses/116221734376880676"}, {"timestamp": "2026-03-19T20:06:17.263Z", "date_only": false, "value": "2026-03-19T20:06:17.263555Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mhgsgxxqgn2h", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "1d9dbeb9-11b6-4d6e-ae12-553fb5bec3b9", "url": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mhgsgxxqgn2h"}, {"timestamp": "2026-03-23T22:44:04.624Z", "date_only": false, "value": "2026-03-23T22:44:04.624801Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mhr54orf422n", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "aab26caa-a4dd-4d11-9cf0-c441b2efc9ce", "url": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mhr54orf422n"}, {"timestamp": "2026-03-26T00:00:00Z", "date_only": false, "value": "2026-03-26T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_alerte \u00b7 CERTFR-2026-ALE-002", "record": "CERTFR-2026-ALE-002", "field": "last_revision_date"}, {"timestamp": "2026-03-26T00:00:00Z", "date_only": false, "value": "2026-03-26T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2026-ALE-002", "record": "CERTFR-2026-ALE-002", "field": "revisions.2.revision_date"}, {"timestamp": "2026-04-02T16:58:50Z", "date_only": false, "value": "2026-04-02T16:58:50.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/networking/cisco_sdwan_auth_bypass.rb", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "858099d4-a931-4e66-973a-16c795414dbf", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/networking/cisco_sdwan_auth_bypass.rb"}, {"timestamp": "2026-04-03T21:02:45.248Z", "date_only": false, "value": "2026-04-03T21:02:45.248265Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mimmlgyw7c2h", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "5e764f0a-4592-4b5e-afff-1dcb51701e7c", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mimmlgyw7c2h"}, {"timestamp": "2026-04-15T17:00:03Z", "date_only": false, "value": "2026-04-15T17:00:03.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/80438", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "1229c13b-7036-4c4b-89b5-4221f49f38b0", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-20127\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a gigachadusers\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C++\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-15 16:40:53\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/80438"}, {"timestamp": "2026-04-16T10:43:12.044Z", "date_only": false, "value": "2026-04-16T10:43:12.044640Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/paws101.bsky.social/post/3mjm7zpzqa22w", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "3faf9fb9-5cc9-464d-b7a5-00d774ed05dd", "url": "https://bsky.app/profile/paws101.bsky.social/post/3mjm7zpzqa22w"}, {"timestamp": "2026-04-20T22:00:00Z", "date_only": false, "value": "2026-04-20T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0516", "record": "WID-SEC-W-2026-0516", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-04-20T22:00:00Z", "date_only": false, "value": "2026-04-20T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0516", "record": "WID-SEC-W-2026-0516", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-04-21T08:09:54.503Z", "date_only": false, "value": "2026-04-21T08:09:54.503+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0516", "record": "WID-SEC-W-2026-0516", "field": "document.tracking.generator.date"}, {"timestamp": "2026-05-15T06:03:19Z", "date_only": false, "value": "2026-05-15T06:03:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/al26-012-critical-vulnerability-affecting-cisco-catalyst-sd-wan-cve-2026-20182", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "a82fe746-84b9-4a67-ac7f-a6e9f7c22bf1", "url": "https://cyber.gc.ca/en/alerts-advisories/al26-012-critical-vulnerability-affecting-cisco-catalyst-sd-wan-cve-2026-20182"}, {"timestamp": "2026-05-15T14:57:06.760Z", "date_only": false, "value": "2026-05-15T14:57:06.760111Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mlvlqitem226", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "5d4f9743-1c10-4d04-98b4-5fe48e09fe17", "content": "Critical #Cisco #SDWAN zero-day (CVE-2026-20127) exploited since 2023. Immediate patching required to prevent unauthorized access. Stay vigilant! #CyberSecurity #NetworkSecurity Link: thedailytechfeed.com/critical-cis...", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3mlvlqitem226"}, {"timestamp": "2026-05-15T17:30:06Z", "date_only": false, "value": "2026-05-15T17:30:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/8211", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "87e277d2-7eac-43ab-b5da-0b3348cb8169", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0432\u0430\u0436\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c\u0438 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u0443\u0433\u0440\u043e\u0437\u044b:\n\n1. \u0425\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Burst Statistics \u0434\u043b\u044f WordPress (\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043d\u0430 200 000 \u0441\u0430\u0439\u0442\u0430\u0445 \u043a\u0430\u043a \u043e\u0431\u043b\u0435\u0433\u0447\u0435\u043d\u043d\u0430\u044f \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u0430 Google Analytics) \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u0430\u043c \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\nCVE-2026-8181 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 23 \u0430\u043f\u0440\u0435\u043b\u044f \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c \u0432\u0435\u0440\u0441\u0438\u0438 3.4.0 \u043f\u043b\u0430\u0433\u0438\u043d\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u043a\u043e\u0434 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u043b \u0432 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, 3.4.1. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u0434\u0430\u0432\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u043f\u0440\u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u0430\u0445 \u043a REST API \u0438 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0430\u0434\u043c\u0438\u043d\u0441\u043a\u0438\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438.\n\n\u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 24 \u0447\u0430\u0441\u0430 Wordfence \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0431\u043e\u043b\u0435\u0435 7400 \u0430\u0442\u0430\u043a, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-8181, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u0430. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 3.4.2 \u043e\u0442 12 \u043c\u0430\u044f \u0438\u043b\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043f\u043b\u0430\u0433\u0438\u043d \u043d\u0430 \u0441\u0432\u043e\u0435\u043c \u0441\u0430\u0439\u0442\u0435.\n\n2. Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 Catalyst SD-WAN (CVE-2026-20182, CVSS 10.0), \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 0-day \u0430\u0442\u0430\u043a\u0430\u0445, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u0440\u0438 \u043f\u0438\u0440\u0438\u043d\u0433\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u00ab\u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u00bb. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0432 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043e\u0439\u0442\u0438 \u0432 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 Cisco Catalyst SD-WAN \u043f\u043e\u0434 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441 \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438, \u043d\u0435 \u044f\u0432\u043b\u044f\u044e\u0449\u0435\u0433\u043e\u0441\u044f root-\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u044d\u0442\u0443 \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a NETCONF, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0435\u043c\u0443 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0435\u0439 SD-WAN-\u0441\u0435\u0442\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430\u00a0\u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 Rapid7\u00a0\u0432 \u0445\u043e\u0434\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0440\u0443\u0433\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 Cisco SD-WAN -  CVE-2026-20127, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u0435.\n\nCisco \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u044d\u0442\u043e \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\n\n3. \u0412 \u0442\u0440\u0435\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 Node-IPC \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u0431\u044d\u043a\u0434\u043e\u0440, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432. \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0434\u0430\u043d\u043d\u044b\u043c Socket \u0438 StepSecurity, \u0442\u0440\u0438 \u0440\u0430\u0437\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 npm \u0431\u044b\u043b\u0438\u00a0\u043f\u0440\u0438\u0437\u043d\u0430\u043d\u044b\u00a0\u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c\u0438: node-ipc@9.1.6, node-ipc@9.2.3 \u0438 node-ipc@12.0.1.\n\n4. \u0412 AISI \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u0442\u0430\u043a\u0438\u0435 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u043a\u0438\u0431\u0435\u0440\u043c\u043e\u0434\u0435\u043b\u0438 \u0418\u0418, \u043a\u0430\u043a Mythos \u043e\u0442 Anthropic \u0438 GPT-5.5-Cyber \u043e\u0442 OpenAI, \u0440\u0435\u0448\u0430\u044e\u0442 \u0437\u0430\u0434\u0430\u0447\u0438 \u0432 \u0418\u0411, \u0441 \u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \u043d\u0435 \u0441\u043f\u0440\u0430\u0432\u043b\u044f\u043b\u0438\u0441\u044c \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0435 \u043c\u043e\u0434\u0435\u043b\u0438, \u0438 \u043f\u0440\u0438\u0431\u043b\u0438\u0436\u0430\u044e\u0442 \u043d\u0430\u0441 \u043a \u0442\u043e\u043c\u0443, \u0447\u0442\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u00ab\u043a\u0438\u0431\u0435\u0440-\u0433\u043e\u0440\u0438\u0437\u043e\u043d\u0442\u043e\u043c\u00bb, \u043a\u043e\u0433\u0434\u0430 \u043c\u043e\u0434\u0435\u043b\u044c \u0431\u0443\u0434\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0441\u043b\u043e\u0436\u043d\u044b\u0435 \u043a\u0438\u0431\u0435\u0440\u0437\u0430\u0434\u0430\u0447\u0438 \u0431\u044b\u0441\u0442\u0440\u0435\u0435 \u0447\u0435\u043b\u043e\u0432\u0435\u043a\u0430.\n\n5. \u0425\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c WooCommerce \u0434\u043b\u044f \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u043a\u0440\u0430\u0436\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u043a\u0440\u0435\u0434\u0438\u0442\u043d\u044b\u0445 \u043a\u0430\u0440\u0442. \u041f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u043b\u043e \u0443\u0436\u0435 \u0431\u043e\u043b\u0435\u0435 40 000 \u043c\u0430\u0433\u0430\u0437\u0438\u043d\u043e\u0432 WooCommerce, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u043a\u043e\u043d\u0441\u0442\u0440\u0443\u043a\u0442\u043e\u0440 FunnelKit. \u041f\u0430\u0442\u0447\u0438 \u0431\u044b\u043b\u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u043d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435.\n\n6. AMD \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u043a\u043e\u0434\u0443, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u043c\u0443 \u043d\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0435, \u043d\u0430\u0440\u0443\u0448\u0430\u0442\u044c \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u043a\u044d\u0448\u0430 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c\u0441\u044f \u0441 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438. \u041e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 AMD Zen-2, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043b\u0438\u043d\u0435\u0439\u043a\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Ryzen \u0438 EPYC.\n\n7. Packagist \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 PHP Composer, \u0447\u0442\u043e\u0431\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u0443, \u0438\u0437-\u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0442\u043e\u043a\u0435\u043d\u044b GitHub \u043f\u043e\u043f\u0430\u0434\u0430\u043b\u0438 \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0435 \u0436\u0443\u0440\u043d\u0430\u043b\u044b GitHub Actions.\n\n\u041f\u0440\u0438\u0447\u0438\u043d\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u043b\u0430\u0441\u044c \u0432 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0438 \u0444\u043e\u0440\u043c\u0430\u0442\u0430 \u0442\u043e\u043a\u0435\u043d\u043e\u0432. GitHub \u043f\u0440\u0438\u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0430 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u043d\u043e\u0432\u043e\u0433\u043e \u0444\u043e\u0440\u043c\u0430\u0442\u0430 \u0434\u043e 18 \u043c\u0430\u044f. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c PHP \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043d\u043e\u0432\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Composer \u043a \u044d\u0442\u043e\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u0443\u0442\u0435\u0447\u043a\u0443 \u0442\u043e\u043a\u0435\u043d\u043e\u0432 \u0432 \u0438\u0445 \u043a\u043e\u043d\u0432\u0435\u0439\u0435\u0440\u0430\u0445 CI/CD.\n\n8. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Akamai \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0442\u0440\u0435\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0449\u0438\u0445 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442 MCP \u2014 Apache Pinot, Apache Doris \u0438 Alibaba RDS.", "url": "https://t.me/true_secator/8211"}, {"timestamp": "2026-06-01T11:10:29Z", "date_only": false, "value": "2026-06-01T11:10:29+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2026-20127", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "d39bf300-2304-44a4-9042-16377f9d8792", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T11:10:29Z", "date_only": false, "value": "2026-06-01T11:10:29+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2026-20127", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "d39bf300-2304-44a4-9042-16377f9d8792", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T11:10:29Z", "date_only": false, "value": "2026-06-01T11:10:29+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2026-20127", "field": "status.status_updated_at", "uuid": "d39bf300-2304-44a4-9042-16377f9d8792", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T11:10:29.431Z", "date_only": false, "value": "2026-06-01T11:10:29.431Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2026-20127", "field": "evidence.0.details.added_date", "uuid": "d39bf300-2304-44a4-9042-16377f9d8792", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-05T01:09:37Z", "date_only": false, "value": "2026-06-05T01:09:37.000000Z", "kind": "sighting", "label": "Seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0175", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "1b82ab63-083a-44a1-9a85-ef2b4cc06123", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0175"}, {"timestamp": "2026-06-05T05:50:00Z", "date_only": false, "value": "2026-06-05T05:50:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cert.se/2026/06/cert-se-veckobrev-v23.html", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "cec8b1ae-d357-434c-a199-45e3ad3872f3", "url": "https://www.cert.se/2026/06/cert-se-veckobrev-v23.html"}, {"timestamp": "2026-06-05T11:13:51Z", "date_only": false, "value": "2026-06-05T11:13:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/8282", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "34b41198-bf1e-4c4c-8a39-6f3caba0ffc1", "content": "Cisco \u0432\u043d\u043e\u0432\u044c \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 0-day \u0432 Cisco Catalyst SD-WAN Manager (CVE-2026-20245\u00a0), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root.\n\n0-day \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0442\u0438\u043f\u044b \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435, Cisco SD-WAN Cloud-Pro, Cisco SD-WAN Cloud (\u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u043e\u0435 Cisco) \u0438 Cisco SD-WAN \u0434\u043b\u044f \u0433\u043e\u0441\u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0439 (FedRAMP).\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0437\u0430\u044f\u0432\u0438\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0432 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u0441 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043a\u0430\u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f root.\n\n\u0414\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b \u043f\u0440\u0430\u0432\u0430 \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0432 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 CVE-2026-20182 \u0438\u043b\u0438 CVE-2026-20127.\n\nCisco \u043f\u043e\u043a\u0430 \u043d\u0435 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0435\u0439 \u043e\u0431 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u043c\u0435\u0442\u043e\u0434\u0430\u043c\u0438, \u043d\u043e \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u0435\u0442 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0435 \u0447\u0438\u0441\u043b\u043e \u0441\u043b\u0443\u0447\u0430\u0435\u0432, \u043a\u043e\u0433\u0434\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u044d\u0442\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u043e\u0442\u043e\u0431\u0440\u0430\u0437\u0438\u0432\u0448\u0435\u043c\u0443\u0441\u044f \u043d\u0430 \u043f\u0435\u0440\u0438\u0444\u0435\u0440\u0438\u0439\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n\u0420\u0430\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0435 \u043a\u0430\u043a SD-WAN vManage, \u044d\u0442\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0442\u044c\u044e \u043f\u043e\u043c\u043e\u0433\u0430\u0435\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0434\u043e 6000 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438 Catalyst SD-WAN \u0441 \u0435\u0434\u0438\u043d\u043e\u0439 \u043f\u0430\u043d\u0435\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\nCisco (PSIRT) \u0443\u0437\u043d\u0430\u043b\u0430 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 CVE-2026-20245 \u0432 \u0438\u044e\u043d\u0435 \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0434\u043e\u0447\u0435\u0440\u043d\u044f\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, Mandiant, \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u043e \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0432 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0432 \u043d\u0435\u043c \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u043b\u0438\u0441\u044c IOCs, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0449\u0438\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0444\u0430\u0439\u043b /var/log/scripts.log \u043d\u0430 SD-WAN \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u043d\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u044b vSmart \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434.\n\n\u0414\u043b\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0442\u043e\u0433\u043e, \u0431\u044b\u043b \u043b\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043d Cisco Catalyst SD-WAN Manager, \u043a\u043b\u0438\u0435\u043d\u0442\u044b \u043c\u043e\u0433\u0443\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c\u0441\u044f \u0432 \u0441\u043b\u0443\u0436\u0431\u0443 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 Cisco (TAC), \u043d\u043e \u0441\u043d\u0430\u0447\u0430\u043b\u0430\u00a0\u0441\u043e\u0431\u0440\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b, \u043e\u0442\u043d\u043e\u0441\u044f\u0449\u0438\u0435\u0441\u044f \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e-\u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438,\u00a0\u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438.\n\nCisco \u0435\u0449\u0435 \u043d\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f CVE-2026-20245, \u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u041f\u041e \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u0434\u043b\u044f CVE-2026-20182, \u043e\u0442 14 \u043c\u0430\u044f.", "url": "https://t.me/true_secator/8282"}, {"timestamp": "2026-06-10T05:11:21.592Z", "date_only": false, "value": "2026-06-10T05:11:21.592766Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sarubot.bsky.social/post/3mnvx4ny4yj2t", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "298c9963-21c7-4356-8bee-efd4bd071d07", "content": "Cisco SD-WAN\u306bCVSS10.0\u306e\u6975\u60aa\u30bc\u30ed\u30c7\u30a4(CVE-2026-20127)\u304c\u767a\u899a\u300223\u5e74\u304b\u3089\u6f5c\u4f0f\u3002\n\n\u30fb\u8a8d\u8a3c\u56de\u907f\u3067\u69cb\u6210\u6539\u3056\u3093\u3001\u30c0\u30a6\u30f3\u30b0\u30ec\u30fc\u30c9\u3067root\u596a\u53d6\n\u30fbCISA\u304c\u7336\u4e882\u65e5\u306e\u7dca\u6025\u30d1\u30c3\u30c1\u3092\u547d\u3058\u308b\u8d85\u4e00\u7d1a\u306e\u8105\u5a01\n\n\u4fe1\u983c\u306e\u62e0\u70b9\u304c\u4fb5\u5165\u7d4c\u8def\u306b\u306a\u308b\u76ae\u8089\u3002\u7ba1\u7406\u753b\u9762\u306e\u30cd\u30c3\u30c8\u9732\u51fa\u306f\u5373\u9589\u585e\u3092\u3002\n\n#Cisco #\u30bc\u30ed\u30c7\u30a4", "url": "https://bsky.app/profile/sarubot.bsky.social/post/3mnvx4ny4yj2t"}, {"timestamp": "2026-06-16T17:39:47Z", "date_only": false, "value": "2026-06-16T17:39:47+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-SDWAN-RPA-EHCHTZK", "record": "CISCO-SA-SDWAN-RPA-EHCHTZK", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-06-16T17:39:47Z", "date_only": false, "value": "2026-06-16T17:39:47+00:00", "kind": "other", "label": "Updated", "source": "csaf_cisco \u00b7 CISCO-SA-SDWAN-RPA-EHCHTZK", "record": "CISCO-SA-SDWAN-RPA-EHCHTZK", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-06-16T17:39:54Z", "date_only": false, "value": "2026-06-16T17:39:54+00:00", "kind": "other", "label": "Document generated", "source": "csaf_cisco \u00b7 CISCO-SA-SDWAN-RPA-EHCHTZK", "record": "CISCO-SA-SDWAN-RPA-EHCHTZK", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-16T17:57:59.054Z", "date_only": false, "value": "2026-06-16T17:57:59.054Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-20127", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-06-16T17:57:59.054Z", "date_only": false, "value": "2026-06-16T17:57:59.054Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / cisco", "record": "CVE-2026-20127", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T15:06:12.607Z", "date_only": false, "value": "2026-06-17T15:06:12.607", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-20127", "record": "FKIE_CVE-2026-20127", "field": "lastModified"}, {"timestamp": "2026-06-19T12:45:15.795Z", "date_only": false, "value": "2026-06-19T12:45:15.795670Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/90ff1026-d346-42fe-9ef6-0370d9f6ab7d", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "1b28473d-a034-4379-a79e-50c0e6002f29", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/90ff1026-d346-42fe-9ef6-0370d9f6ab7d", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2026-20127", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "d39bf300-2304-44a4-9042-16377f9d8792", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:03:42.554Z", "date_only": false, "value": "2026-06-23T14:03:42.554669Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d39bf300-2304-44a4-9042-16377f9d8792", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "43568d3d-dbf7-4c74-9c9a-245fca690711", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d39bf300-2304-44a4-9042-16377f9d8792", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-29T11:56:19.800Z", "date_only": false, "value": "2026-06-29T11:56:19.800362Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3mpggmohj722b", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "7138e5bb-1166-413e-82ac-1755c933ff6c", "content": "That prerequisite sounds like a meaningful bar - and it is - until you factor in that CVE-2026-20182 & CVE-2026-20127 (also recently disclosed Cisco flaws) may lower it *considerably*.", "url": "https://bsky.app/profile/pentest-tools.com/post/3mpggmohj722b"}, {"timestamp": "2026-06-29T11:56:20.765Z", "date_only": false, "value": "2026-06-29T11:56:20.765530Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3mpggmohryc2b", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "ae486000-4d00-4b97-9cf4-1d745902da42", "content": "That prerequisite sounds like a meaningful bar - and it is - until you factor in that CVE-2026-20182 & CVE-2026-20127 (also recently disclosed Cisco flaws) may lower it *considerably*.", "url": "https://bsky.app/profile/pentest-tools.com/post/3mpggmohryc2b"}, {"timestamp": "2026-06-29T11:56:21.757Z", "date_only": false, "value": "2026-06-29T11:56:21.757795Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3mpggmohtws2b", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "9293b44b-00a4-4fb8-a14f-48cf3d3c4264", "content": "That prerequisite sounds like a meaningful bar - and it is - until you factor in that CVE-2026-20182 & CVE-2026-20127 (also recently disclosed Cisco flaws) may lower it *considerably*.", "url": "https://bsky.app/profile/pentest-tools.com/post/3mpggmohtws2b"}, {"timestamp": "2026-06-29T11:56:22.703Z", "date_only": false, "value": "2026-06-29T11:56:22.703087Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3mpggmohtwt2b", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "f836448b-3ab5-4ace-87d9-dd655ac6b573", "content": "That prerequisite sounds like a meaningful bar - and it is - until you factor in that CVE-2026-20182 & CVE-2026-20127 (also recently disclosed Cisco flaws) may lower it *considerably*.", "url": "https://bsky.app/profile/pentest-tools.com/post/3mpggmohtwt2b"}, {"timestamp": "2026-06-29T11:56:23.616Z", "date_only": false, "value": "2026-06-29T11:56:23.616235Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3mpggmohvvd2b", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "8be4bd21-8ddf-4a7b-94b4-e5f632d806dd", "content": "That prerequisite sounds like a meaningful bar - and it is - until you factor in that CVE-2026-20182 & CVE-2026-20127 (also recently disclosed Cisco flaws) may lower it *considerably*.", "url": "https://bsky.app/profile/pentest-tools.com/post/3mpggmohvvd2b"}, {"timestamp": "2026-06-29T11:56:24.523Z", "date_only": false, "value": "2026-06-29T11:56:24.523271Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3mpggmohwul2b", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "e70337d8-17a3-4a4c-87bd-cdc34570b727", "content": "That prerequisite sounds like a meaningful bar - and it is - until you factor in that CVE-2026-20182 & CVE-2026-20127 (also recently disclosed Cisco flaws) may lower it *considerably*.", "url": "https://bsky.app/profile/pentest-tools.com/post/3mpggmohwul2b"}, {"timestamp": "2026-07-13T13:00:07.314Z", "date_only": false, "value": "2026-07-13T13:00:07.314647Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/8345", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "359a58f3-273b-4334-a5db-ba479edde88a", "content": "\u041f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u043d\u043e\u0432\u044b\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438, \u043a\u0430\u043a \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Cisco Catalyst SD-WAN (CVE-2026-20245) \u0432 0-day \u0430\u0442\u0430\u043a\u0430\u0445 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0444\u0435\u0439\u043a\u043e\u0432\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 root \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\nCVE-2026-20245 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 Cisco Catalyst SD-WAN Manager (vManage), Controller (vSmart) \u0438 Validator (vBond), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 root \u043f\u0443\u0442\u0435\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e \u043d\u0435\u0439 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u043c\u0435\u0441\u044f\u0446\u0430, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u0432, \u0447\u0442\u043e CVE-2026-20245 \u0431\u044b\u043b\u0430\u00a0\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0432 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0430\u0442\u0430\u043a,\u00a0\u043d\u043e \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0432 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439.\n\n\u0422\u043e\u0433\u0434\u0430 Cisco \u043b\u0438\u0448\u044c \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u0443\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 root, \u0430 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b \u0431\u044b\u043b\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0435\u043c\u043e\u0439 \u043d\u0430 \u043f\u0435\u0440\u0438\u0444\u0435\u0440\u0438\u0439\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Mandiant \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438, \u0447\u0442\u043e CVE-2026-20245 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0443\u0436\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0446\u0435\u043b\u0435\u0432\u044b\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c SD-WAN.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0435 \u043d\u0430\u0447\u0430\u043b\u043e\u0441\u044c \u0441 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u0438\u0440\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 SD-WAN, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 \u0443\u0441\u043b\u0443\u0433.\n\n\u041d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u043c\u0430\u0440\u0442\u0430 2026 \u0433\u043e\u0434\u0430, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u043b \u0444\u0435\u0439\u043a\u043e\u0432\u044b\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438 \u0438 \u043f\u0440\u043e\u0445\u043e\u0434\u0438\u043b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043d\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 SD-WAN Manager, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u0432\u043e\u044e\u00a0vmanage-admin \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c.\n\n\u0412 Mandiant \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u043c\u043e\u0433\u043b\u043e \u0431\u044b\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u043e \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0440\u0430\u043d\u0435\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043d\u0443\u043b\u0435\u0439 \u0432 Cisco SD-WAN, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, CVE-2026-20127 \u0438 CVE-2026-20182, \u043e\u0434\u043d\u0430\u043a\u043e \u0442\u043e\u0447\u043d\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u0442\u0430\u043a \u0438 \u043d\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d.\n\n\u041f\u043e\u043b\u0443\u0447\u0438\u0432 \u0434\u043e\u0441\u0442\u0443\u043f, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043c\u0435\u043d\u044f\u043b\u0438 \u043f\u0430\u0440\u043e\u043b\u044c \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0430 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u0432\u043e\u0448\u043b\u0438 \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 SD-WAN Manager \u0438 \u0438\u0437\u0432\u043b\u0435\u043a\u043b\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u0435\u0440\u0438\u0444\u0435\u0440\u0438\u0439\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 \u0438 \u0448\u0430\u0431\u043b\u043e\u043d\u043e\u0432 SD-WAN.\n\nMandiant \u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442, \u0447\u0442\u043e \u043f\u043e\u0441\u043b\u0435 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0438 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0439 \u043f\u0430\u0440\u043e\u043b\u044c \u0434\u043b\u044f \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u0441\u043d\u0438\u0437\u0438\u0442\u044c \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f.\n\n\u0417\u0430\u0442\u0435\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 CVE-2026-20245 \u0447\u0435\u0440\u0435\u0437 \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0430\u0440\u0435\u043d\u0434\u0430\u0442\u043e\u0440\u0430 \u0432 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 SD-WAN, \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 CSV-\u0444\u0430\u0439\u043b evil_tenant.csv.\n\nCVE-2026-20245, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 Mandiant \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 Cisco, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 (CLI) \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 Cisco Catalyst SD-WAN \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 root, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443.\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u041f\u041e \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u0441\u043e\u0437\u0434\u0430\u043b\u0430 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0435 \u043a\u043e\u043f\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f\u00a0/etc/passwd\u0438\u00a0/etc/shadow, \u0430 \u0437\u0430\u0442\u0435\u043c \u0441\u043e\u0437\u0434\u0430\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u0441 \u0438\u043c\u0435\u043d\u0435\u043c troot \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root.\n\n\u0417\u0430\u0442\u0435\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u00a0su \u043a\u043e\u043c\u0430\u043d\u0434\u0443 Linux \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0441 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u043d\u0430 \u0432\u043d\u043e\u0432\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c root, \u043f\u043e\u043b\u0443\u0447\u0438\u0432 \u0442\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c Mandiant, \u043d\u0430\u043f\u0430\u0434\u0430\u0432\u0448\u0438\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043c\u0435\u0442\u043e\u0434\u044b, \u043f\u0440\u0435\u043f\u044f\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044e \u043a\u0440\u0438\u043c\u0438\u043d\u0430\u043b\u0438\u0441\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439, \u0434\u0430\u0431\u044b \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f.\n\n\u0427\u0442\u043e \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u044f \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0435 \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043f\u0435\u0440\u0435\u0434 \u0438\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0435 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041e\u043d\u0438 \u0442\u0430\u043a\u0436\u0435 \u043e\u0447\u0438\u0441\u0442\u0438\u043b\u0438 \u0441\u043b\u0435\u0434\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u0443\u0434\u0430\u043b\u0438\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 CSV-\u0444\u0430\u0439\u043b, \u0443\u0434\u0430\u043b\u0438\u0432 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0430\u0442\u0430\u043a\u0438, \u0438 \u0441\u0442\u0435\u0440\u0435\u0432 \u0441\u043b\u0435\u0434\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 root.\n\nMandiant \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0432 \u043c\u0430\u0440\u0442\u0435 2026 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0430\u0441\u044c \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u0438\u0440\u0438\u043d\u0433\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u0431\u044b\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043d\u0438 \u043a \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0440\u0430\u043d\u0435\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\nCisco \u0436\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u0447\u0442\u043e \u0432\u0437\u043b\u043e\u043c \u043d\u0435 \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e CVE-2026-20182, \u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u043b\u0430, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b, \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0435 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430, \u0447\u0442\u043e\u0431\u044b \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 IOCs, IP \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438.", "url": "https://t.me/true_secator/8345"}, {"timestamp": "2026-07-13T22:00:04.361Z", "date_only": false, "value": "2026-07-13T22:00:04.361534Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/93054", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "8bda3f3d-59e6-492f-8d74-7ef39bb35fec", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20127-Exploit-Extension\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a anuththara2007-W\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Ruby\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-12 04:28:40\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/93054"}, {"timestamp": "2026-07-14T00:00:08.522Z", "date_only": false, "value": "2026-07-14T00:00:08.522576Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/93054", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "bd94cd1e-db50-4fed-b76e-b09a2c150c30", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20127-Exploit-Extension\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a anuththara2007-W\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Ruby\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-12 04:28:40\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/93054", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-19T16:00:06.207Z", "date_only": false, "value": "2026-07-19T16:00:06.207899Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/MalaysiaHacktivistz/19561", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "91e5656c-25be-46bf-82df-bf9b6fd16d83", "content": "Cisco SD-WAN Zero-Day CVE-2026-20127 Exploited Since 2023 for Admin Access \u2013 thehackernews.com\n\nThu, 26 Feb 2026 14:13:00", "url": "https://t.me/MalaysiaHacktivistz/19561"}, {"timestamp": "2026-07-20T00:00:21.077Z", "date_only": false, "value": "2026-07-20T00:00:21.077203Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/MalaysiaHacktivistz/19561", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "23c89e11-1d33-485a-87f9-c91ba88f253e", "content": "Cisco SD-WAN Zero-Day CVE-2026-20127 Exploited Since 2023 for Admin Access \u2013 thehackernews.com\n\nThu, 26 Feb 2026 14:13:00", "url": "https://t.me/MalaysiaHacktivistz/19561", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-20T19:00:04.714Z", "date_only": false, "value": "2026-07-20T19:00:04.714261Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/MalaysiaHacktivistz/10454", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "d6dc7964-cc6f-4794-a504-bcb5fcd46918", "content": "Cisco SD-WAN Zero-Day CVE-2026-20127 Exploited Since 2023 for Admin Access \u2013 thehackernews.com\n\nThu, 26 Feb 2026 14:13:00", "url": "https://t.me/MalaysiaHacktivistz/10454", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-20T19:00:07.718Z", "date_only": false, "value": "2026-07-20T19:00:07.718889Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/proxy_bar/3190", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "079c90fc-1bf8-41db-b73e-bc793b3ed5db", "content": "UPD to https://t.me/proxy_bar/3185 CVE-2026-20127\n *\n\u0412 Cisco SD-WAN honeypot \u043d\u0430\u0447\u0430\u043b\u0438 \u043c\u0430\u0441\u0441\u043e\u0432\u043e \u043f\u0440\u0438\u043b\u0435\u0442\u0430\u0442\u044c \u0432\u0435\u0431-\u0448\u0435\u043b\u043b\u044b.\n\u041c\u0430\u0445\u043e\u0432\u0438\u0447\u043e\u043a \u043a\u0440\u0443\u0442\u0438\u0442\u0441\u044f.", "url": "https://t.me/proxy_bar/3190"}, {"timestamp": "2026-07-20T19:00:08.054Z", "date_only": false, "value": "2026-07-20T19:00:08.054277Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/proxy_bar/3185", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "61ac61a0-8a5c-4ba0-bbdf-dafc4c80acdb", "content": "CVE-2026-20127\n*\nCisco-SD-WAN-Preauth-RCE\n\nwar", "url": "https://t.me/proxy_bar/3185"}, {"timestamp": "2026-07-20T19:00:11.862Z", "date_only": false, "value": "2026-07-20T19:00:11.862763Z", "kind": "sighting", "label": "Seen", "source": "Telegram/GI7OHSoaP1xIHuGqTAwHNKDcr8KU1Ad2nEwl-UcBa-gQJw", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "b7875cf8-dcda-468c-9ef5-61802d7ae491"}, {"timestamp": "2026-07-22T00:00:27.971Z", "date_only": false, "value": "2026-07-22T00:00:27.971150Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/3190", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "249fae45-dc39-453a-b147-0d217cdc2996", "content": "UPD to https://t.me/proxy_bar/3185 CVE-2026-20127\n *\n\u0412 Cisco SD-WAN honeypot \u043d\u0430\u0447\u0430\u043b\u0438 \u043c\u0430\u0441\u0441\u043e\u0432\u043e \u043f\u0440\u0438\u043b\u0435\u0442\u0430\u0442\u044c \u0432\u0435\u0431-\u0448\u0435\u043b\u043b\u044b.\n\u041c\u0430\u0445\u043e\u0432\u0438\u0447\u043e\u043a \u043a\u0440\u0443\u0442\u0438\u0442\u0441\u044f.", "url": "https://t.me/proxy_bar/3190", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-25T15:00:08.912Z", "date_only": false, "value": "2026-07-25T15:00:08.912023Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/629", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "1418690c-9948-4903-91f8-f812c87bdd79", "content": "\u041f\u044f\u0442\u044c \u0441\u0442\u0440\u0430\u043d \u0441\u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043e\u0442\u0432\u0435\u0442 \u043d\u0430 \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 Cisco SD-WAN\n\nCISA \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u0443\u044e \u0434\u0438\u0440\u0435\u043a\u0442\u0438\u0432\u0443, \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u0433\u0440\u0430\u0436\u0434\u0430\u043d\u0441\u043a\u0438\u0445 \u0444\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u0445 \u0432\u0435\u0434\u043e\u043c\u0441\u0442\u0432 \u0421\u0428\u0410. \u0414\u043e\u043a\u0443\u043c\u0435\u043d\u0442 \u043f\u0440\u0435\u0434\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u0432\u044b\u044f\u0432\u0438\u0442\u044c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0438\u0445 \u043d\u0430 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e 27 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2026 \u0433\u043e\u0434\u0430.\n\n\u0412 \u043e\u0441\u043d\u043e\u0432\u0435 \u0430\u0442\u0430\u043a \u043b\u0435\u0436\u0430\u0442 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Cisco Catalyst SD-WAN \u2014 CVE-2026-20127, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0430, \u0438 CVE-2022-20775, \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044e\u0449\u0430\u044f \u043f\u0443\u0442\u044c \u043a \u043f\u0440\u0430\u0432\u0430\u043c root. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u044e\u0442 \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0444\u0438\u043a\u0442\u0438\u0432\u043d\u044b\u0439 \u0443\u0437\u0435\u043b, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u0434\u043e\u043b\u0433\u043e\u0441\u0440\u043e\u0447\u043d\u043e\u0435 \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u0435 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u041a \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u043c\u0443 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0441\u043e\u0435\u0434\u0438\u043d\u0438\u043b\u0438\u0441\u044c \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u0430 \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438, \u041a\u0430\u043d\u0430\u0434\u044b, \u041d\u043e\u0432\u043e\u0439 \u0417\u0435\u043b\u0430\u043d\u0434\u0438\u0438, \u0410\u0432\u0441\u0442\u0440\u0430\u043b\u0438\u0438 \u0438 \u0421\u0428\u0410. \u0410\u0432\u0441\u0442\u0440\u0430\u043b\u0438\u0439\u0441\u043a\u0430\u044f \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0430 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u043e\u0434\u0438\u043d \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Cisco SD-WAN \u0441 2023 \u0433\u043e\u0434\u0430 \u2014 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u0435\u0451 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043b\u0438\u0448\u044c \u0432 \u043a\u043e\u043d\u0446\u0435 2025 \u0433\u043e\u0434\u0430.\n\n#cisco #zeroday #sdwan #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \n\n@ZerodayAlert", "url": "https://t.me/ZerodayAlert/629"}, {"timestamp": "2026-07-26T00:00:35.092Z", "date_only": false, "value": "2026-07-26T00:00:35.092693Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ZerodayAlert/629", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "41858b95-3284-4df1-b7e6-4ffebffb8959", "content": "\u041f\u044f\u0442\u044c \u0441\u0442\u0440\u0430\u043d \u0441\u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043e\u0442\u0432\u0435\u0442 \u043d\u0430 \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 Cisco SD-WAN\n\nCISA \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u0443\u044e \u0434\u0438\u0440\u0435\u043a\u0442\u0438\u0432\u0443, \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u0433\u0440\u0430\u0436\u0434\u0430\u043d\u0441\u043a\u0438\u0445 \u0444\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u0445 \u0432\u0435\u0434\u043e\u043c\u0441\u0442\u0432 \u0421\u0428\u0410. \u0414\u043e\u043a\u0443\u043c\u0435\u043d\u0442 \u043f\u0440\u0435\u0434\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u0432\u044b\u044f\u0432\u0438\u0442\u044c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0438\u0445 \u043d\u0430 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e 27 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2026 \u0433\u043e\u0434\u0430.\n\n\u0412 \u043e\u0441\u043d\u043e\u0432\u0435 \u0430\u0442\u0430\u043a \u043b\u0435\u0436\u0430\u0442 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Cisco Catalyst SD-WAN \u2014 CVE-2026-20127, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0430, \u0438 CVE-2022-20775, \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044e\u0449\u0430\u044f \u043f\u0443\u0442\u044c \u043a \u043f\u0440\u0430\u0432\u0430\u043c root. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u044e\u0442 \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0444\u0438\u043a\u0442\u0438\u0432\u043d\u044b\u0439 \u0443\u0437\u0435\u043b, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u0434\u043e\u043b\u0433\u043e\u0441\u0440\u043e\u0447\u043d\u043e\u0435 \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u0435 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u041a \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u043c\u0443 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0441\u043e\u0435\u0434\u0438\u043d\u0438\u043b\u0438\u0441\u044c \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u0430 \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438, \u041a\u0430\u043d\u0430\u0434\u044b, \u041d\u043e\u0432\u043e\u0439 \u0417\u0435\u043b\u0430\u043d\u0434\u0438\u0438, \u0410\u0432\u0441\u0442\u0440\u0430\u043b\u0438\u0438 \u0438 \u0421\u0428\u0410. \u0410\u0432\u0441\u0442\u0440\u0430\u043b\u0438\u0439\u0441\u043a\u0430\u044f \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0430 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u043e\u0434\u0438\u043d \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Cisco SD-WAN \u0441 2023 \u0433\u043e\u0434\u0430 \u2014 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u0435\u0451 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043b\u0438\u0448\u044c \u0432 \u043a\u043e\u043d\u0446\u0435 2025 \u0433\u043e\u0434\u0430.\n\n#cisco #zeroday #sdwan #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \n\n@ZerodayAlert", "url": "https://t.me/ZerodayAlert/629", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-29T12:03:24.056Z", "date_only": false, "value": "2026-07-29T12:03:24.056728Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/codeby_sec/10321", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "bfc70bda-350d-4337-8741-ea8196392d5b", "content": "29 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u2014 \u0441\u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0441\u0440\u0435\u0434\u043d\u0435\u043c \u0436\u0438\u0432\u0451\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 CVE\n\n\u041d\u0435 \u0434\u043d\u0435\u0439, \u043d\u0435 \u043d\u0435\u0434\u0435\u043b\u044c \u2014 \u043c\u0435\u0441\u044f\u0446\u0435\u0432. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c IBM X-Force Threat Intelligence Index 2025, \u043c\u0435\u0436\u0434\u0443 \u043c\u043e\u043c\u0435\u043d\u0442\u043e\u043c, \u043a\u043e\u0433\u0434\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u043d\u043e\u043c\u0435\u0440 CVE, \u0438 \u043c\u043e\u043c\u0435\u043d\u0442\u043e\u043c, \u043a\u043e\u0433\u0434\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f \u0440\u0435\u0430\u043b\u044c\u043d\u043e \u0435\u0451 \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u0435\u0442, \u043f\u0440\u043e\u0445\u043e\u0434\u0438\u0442 \u0432 \u0441\u0440\u0435\u0434\u043d\u0435\u043c 29 \u043c\u0435\u0441\u044f\u0446\u0435\u0432. \u0410 \u0442\u0435\u043f\u0435\u0440\u044c \u0441\u0440\u0430\u0432\u043d\u0438\u0442\u0435: \u0432\u0440\u0435\u043c\u044f, \u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0432\u0435\u0436\u0443\u044e CVE (\u0442\u0430\u043a \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u043c\u044b\u0439 n-day), \u0441\u0436\u0430\u043b\u043e\u0441\u044c \u0434\u043e 5 \u0434\u043d\u0435\u0439. \u0412 2018\u20132019 \u0431\u044b\u043b\u043e \u043e\u043a\u043e\u043b\u043e 32. \u0427\u0443\u0432\u0441\u0442\u0432\u0443\u0435\u0442\u0435 \u0440\u0430\u0437\u0440\u044b\u0432?\n\n\u2757\ufe0fGoogle Threat Intelligence Group \u043d\u0430\u0441\u0447\u0438\u0442\u0430\u043b\u0430 75 zero-day \u0437\u0430 2024 \u0433\u043e\u0434, \u0438 44% \u0430\u0442\u0430\u043a \u043f\u0440\u0438\u0448\u043b\u0438\u0441\u044c \u043d\u0430 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b \u2014 \u0440\u0435\u043a\u043e\u0440\u0434\u043d\u0430\u044f \u0434\u043e\u043b\u044f. SD-WAN \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u044b, \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0441\u0435\u0442\u0435\u0432\u043e\u0435 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u2014 \u0432\u0441\u0451, \u0447\u0442\u043e \u0442\u043e\u0440\u0447\u0438\u0442 \u043d\u0430\u0440\u0443\u0436\u0443 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043e\u0439.\n\n\u0420\u0430\u0437\u0431\u0435\u0440\u0451\u043c \u043d\u0430 \u0434\u0432\u0443\u0445 \u0441\u0432\u0435\u0436\u0438\u0445 \u043f\u0440\u0438\u043c\u0435\u0440\u0430\u0445, \u043a\u0430\u043a \u044d\u0442\u043e \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u043d\u0430 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0435.\n\n\ud83c\udf87CVE-2026-20127 \u2014 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 Cisco Catalyst SD-WAN. CVSS 10.0 \u0438\u0437 10. \u0410\u0442\u0430\u043a\u0430 \u043f\u043e \u0441\u0435\u0442\u0438, \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f, \u0431\u0435\u0437 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0430\u0434\u043c\u0438\u043d\u0441\u043a\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043d\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0432\u0441\u0435\u0439 SD-WAN-\u0441\u0435\u0442\u0438. \u0414\u0430\u043b\u044c\u0448\u0435 \u2014 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 \u0442\u0440\u0430\u0444\u0438\u043a\u0430, lateral movement, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0435 rogue peers \u0434\u043b\u044f \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u044f. EPSS \u2014 0.88, \u044d\u0442\u043e \u0442\u043e\u043f-1% \u0441\u0440\u0435\u0434\u0438 \u0432\u0441\u0435\u0445 CVE \u043f\u043e \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0438\u0439 \u043c\u0435\u0441\u044f\u0446.\n\n\ud83d\udd11CVE-2026-22769 \u2014 \u0432\u0448\u0438\u0442\u044b\u0435 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 Dell RecoverPoint for Virtual Machines. \u041a\u043b\u0430\u0441\u0441\u0438\u043a\u0430 \u0436\u0430\u043d\u0440\u0430: hardcoded credentials, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u0430\u044e\u0442 root-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u041e\u0421. \u041d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439, \u0437\u043d\u0430\u044e\u0449\u0438\u0439 \u044d\u0442\u0438 \u043a\u0440\u0435\u0434\u044b, \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f. \u041e\u0431\u0430 \u043a\u0435\u0439\u0441\u0430 \u2014 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 CISA KEV, \u043e\u0431\u0430 \u0441 \u0440\u0435\u0448\u0435\u043d\u0438\u0435\u043c SSVC: Act, \u0442\u043e \u0435\u0441\u0442\u044c \u00ab\u043f\u0430\u0442\u0447\u0438\u0442\u044c \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e\u00bb.\n\n\u0427\u0442\u043e \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u044f\u0435\u0442 \u044d\u0442\u0438 \u043f\u0440\u0438\u043c\u0435\u0440\u044b? \u0416\u0438\u0437\u043d\u0435\u043d\u043d\u044b\u0439 \u0446\u0438\u043a\u043b zero-day \u2014 \u043d\u0435 \u043b\u0438\u043d\u0435\u0439\u043d\u0430\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u00ab\u043d\u0430\u0448\u043b\u0438 \u2192 \u043f\u043e\u0447\u0438\u043d\u0438\u043b\u0438\u00bb. \u042d\u0442\u043e \u0448\u0435\u0441\u0442\u044c \u044d\u0442\u0430\u043f\u043e\u0432, \u043d\u0430 \u043a\u0430\u0436\u0434\u043e\u043c \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u0440\u0430\u0437\u043d\u044b\u0435 \u043b\u044e\u0434\u0438 \u0438 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u0440\u0430\u0437\u043d\u044b\u0435 \u043e\u043a\u043d\u0430 \u0440\u0438\u0441\u043a\u0430:\n\n\u2022 \u0412\u043d\u0435\u0441\u0435\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u2014 \u0431\u0430\u0433 \u0440\u043e\u0436\u0434\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u0438\u0438 \u043a\u043e\u0434\u0430 \u0438\u043b\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438\n\u2022 \u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u2014 \u043d\u0430\u0445\u043e\u0434\u0438\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c, \u0444\u0430\u0437\u0437\u0435\u0440 \u0438\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\n\u2022 \u0412\u043e\u043e\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u2014 \u0438\u0437 \u0431\u0430\u0433\u0430 \u0441\u043e\u0431\u0438\u0440\u0430\u044e\u0442 \u0431\u043e\u0435\u0432\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0441 \u043e\u0431\u0444\u0443\u0441\u043a\u0430\u0446\u0438\u0435\u0439\n\u2022 \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u2014 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0442\u0438\u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0446\u0435\u043b\u0435\u0439\n\u2022 \u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438 \u043f\u0430\u0442\u0447 \u2014 \u0432\u0435\u043d\u0434\u043e\u0440 \u0443\u0437\u043d\u0430\u0451\u0442, \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0443 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\n\u2022 \u0420\u0430\u0437\u0432\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u2014 \u043f\u0430\u0442\u0447 \u0432\u044b\u043f\u0443\u0449\u0435\u043d, \u043d\u043e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0442\u0435\u0441\u0442\u0438\u0440\u0443\u044e\u0442, \u0441\u043e\u0433\u043b\u0430\u0441\u043e\u0432\u044b\u0432\u0430\u044e\u0442 \u043e\u043a\u043d\u0430 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u044f, \u043a\u0430\u0442\u044f\u0442 \u043a\u0430\u0441\u043a\u0430\u0434\u043d\u043e\n\n\u0418 \u0432\u043e\u0442 \u043f\u0430\u0440\u0430\u0434\u043e\u043a\u0441: \u043f\u043e\u0441\u043b\u0435 \u043f\u044f\u0442\u043e\u0433\u043e \u044d\u0442\u0430\u043f\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435 \u0438\u0441\u0447\u0435\u0437\u0430\u0435\u0442. \u041e\u043d\u0430 \u043f\u0440\u043e\u0441\u0442\u043e \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u0442 \u0438\u0437 \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438 0-day \u0432 n-day, \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442\u0441\u044f \u2014 \u0438\u043d\u043e\u0433\u0434\u0430 \u0442\u0435 \u0441\u0430\u043c\u044b\u0435 29 \u043c\u0435\u0441\u044f\u0446\u0435\u0432.\n\n\u27a1\ufe0f\u0412 \u043f\u043e\u043b\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u2014 CVSS-\u0432\u0435\u043a\u0442\u043e\u0440\u044b \u0441 \u043f\u043e\u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043d\u044b\u043c \u0440\u0430\u0437\u0431\u043e\u0440\u043e\u043c, \u043c\u0430\u043f\u043f\u0438\u043d\u0433 \u043d\u0430 MITRE ATT&CK \u0438 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0447\u0435\u043a\u043b\u0438\u0441\u0442 \u0434\u043b\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\nhttps://codeby.net/threads/uyazvimost-nulevogo-dnya-zhiznennyi-tsikl-real-nyye-cve-i-protsess-patchinga.94896/", "url": "https://t.me/codeby_sec/10321"}, {"timestamp": "2026-08-04T06:00:04.518Z", "date_only": false, "value": "2026-08-04T06:00:04.518505Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/codeby_sec/10321", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "92dd334b-c54f-43f6-a38d-503e4ecadd01", "content": "29 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u2014 \u0441\u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0441\u0440\u0435\u0434\u043d\u0435\u043c \u0436\u0438\u0432\u0451\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 CVE\n\n\u041d\u0435 \u0434\u043d\u0435\u0439, \u043d\u0435 \u043d\u0435\u0434\u0435\u043b\u044c \u2014 \u043c\u0435\u0441\u044f\u0446\u0435\u0432. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c IBM X-Force Threat Intelligence Index 2025, \u043c\u0435\u0436\u0434\u0443 \u043c\u043e\u043c\u0435\u043d\u0442\u043e\u043c, \u043a\u043e\u0433\u0434\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u043d\u043e\u043c\u0435\u0440 CVE, \u0438 \u043c\u043e\u043c\u0435\u043d\u0442\u043e\u043c, \u043a\u043e\u0433\u0434\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f \u0440\u0435\u0430\u043b\u044c\u043d\u043e \u0435\u0451 \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u0435\u0442, \u043f\u0440\u043e\u0445\u043e\u0434\u0438\u0442 \u0432 \u0441\u0440\u0435\u0434\u043d\u0435\u043c 29 \u043c\u0435\u0441\u044f\u0446\u0435\u0432. \u0410 \u0442\u0435\u043f\u0435\u0440\u044c \u0441\u0440\u0430\u0432\u043d\u0438\u0442\u0435: \u0432\u0440\u0435\u043c\u044f, \u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0432\u0435\u0436\u0443\u044e CVE (\u0442\u0430\u043a \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u043c\u044b\u0439 n-day), \u0441\u0436\u0430\u043b\u043e\u0441\u044c \u0434\u043e 5 \u0434\u043d\u0435\u0439. \u0412 2018\u20132019 \u0431\u044b\u043b\u043e \u043e\u043a\u043e\u043b\u043e 32. \u0427\u0443\u0432\u0441\u0442\u0432\u0443\u0435\u0442\u0435 \u0440\u0430\u0437\u0440\u044b\u0432?\n\n\u2757\ufe0fGoogle Threat Intelligence Group \u043d\u0430\u0441\u0447\u0438\u0442\u0430\u043b\u0430 75 zero-day \u0437\u0430 2024 \u0433\u043e\u0434, \u0438 44% \u0430\u0442\u0430\u043a \u043f\u0440\u0438\u0448\u043b\u0438\u0441\u044c \u043d\u0430 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b \u2014 \u0440\u0435\u043a\u043e\u0440\u0434\u043d\u0430\u044f \u0434\u043e\u043b\u044f. SD-WAN \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u044b, \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0441\u0435\u0442\u0435\u0432\u043e\u0435 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u2014 \u0432\u0441\u0451, \u0447\u0442\u043e \u0442\u043e\u0440\u0447\u0438\u0442 \u043d\u0430\u0440\u0443\u0436\u0443 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043e\u0439.\n\n\u0420\u0430\u0437\u0431\u0435\u0440\u0451\u043c \u043d\u0430 \u0434\u0432\u0443\u0445 \u0441\u0432\u0435\u0436\u0438\u0445 \u043f\u0440\u0438\u043c\u0435\u0440\u0430\u0445, \u043a\u0430\u043a \u044d\u0442\u043e \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u043d\u0430 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0435.\n\n\ud83c\udf87CVE-2026-20127 \u2014 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 Cisco Catalyst SD-WAN. CVSS 10.0 \u0438\u0437 10. \u0410\u0442\u0430\u043a\u0430 \u043f\u043e \u0441\u0435\u0442\u0438, \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f, \u0431\u0435\u0437 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0430\u0434\u043c\u0438\u043d\u0441\u043a\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043d\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0432\u0441\u0435\u0439 SD-WAN-\u0441\u0435\u0442\u0438. \u0414\u0430\u043b\u044c\u0448\u0435 \u2014 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 \u0442\u0440\u0430\u0444\u0438\u043a\u0430, lateral movement, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0435 rogue peers \u0434\u043b\u044f \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u044f. EPSS \u2014 0.88, \u044d\u0442\u043e \u0442\u043e\u043f-1% \u0441\u0440\u0435\u0434\u0438 \u0432\u0441\u0435\u0445 CVE \u043f\u043e \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0438\u0439 \u043c\u0435\u0441\u044f\u0446.\n\n\ud83d\udd11CVE-2026-22769 \u2014 \u0432\u0448\u0438\u0442\u044b\u0435 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 Dell RecoverPoint for Virtual Machines. \u041a\u043b\u0430\u0441\u0441\u0438\u043a\u0430 \u0436\u0430\u043d\u0440\u0430: hardcoded credentials, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u0430\u044e\u0442 root-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u041e\u0421. \u041d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439, \u0437\u043d\u0430\u044e\u0449\u0438\u0439 \u044d\u0442\u0438 \u043a\u0440\u0435\u0434\u044b, \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f. \u041e\u0431\u0430 \u043a\u0435\u0439\u0441\u0430 \u2014 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 CISA KEV, \u043e\u0431\u0430 \u0441 \u0440\u0435\u0448\u0435\u043d\u0438\u0435\u043c SSVC: Act, \u0442\u043e \u0435\u0441\u0442\u044c \u00ab\u043f\u0430\u0442\u0447\u0438\u0442\u044c \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e\u00bb.\n\n\u0427\u0442\u043e \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u044f\u0435\u0442 \u044d\u0442\u0438 \u043f\u0440\u0438\u043c\u0435\u0440\u044b? \u0416\u0438\u0437\u043d\u0435\u043d\u043d\u044b\u0439 \u0446\u0438\u043a\u043b zero-day \u2014 \u043d\u0435 \u043b\u0438\u043d\u0435\u0439\u043d\u0430\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u00ab\u043d\u0430\u0448\u043b\u0438 \u2192 \u043f\u043e\u0447\u0438\u043d\u0438\u043b\u0438\u00bb. \u042d\u0442\u043e \u0448\u0435\u0441\u0442\u044c \u044d\u0442\u0430\u043f\u043e\u0432, \u043d\u0430 \u043a\u0430\u0436\u0434\u043e\u043c \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u0440\u0430\u0437\u043d\u044b\u0435 \u043b\u044e\u0434\u0438 \u0438 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u0440\u0430\u0437\u043d\u044b\u0435 \u043e\u043a\u043d\u0430 \u0440\u0438\u0441\u043a\u0430:\n\n\u2022 \u0412\u043d\u0435\u0441\u0435\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u2014 \u0431\u0430\u0433 \u0440\u043e\u0436\u0434\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u0438\u0438 \u043a\u043e\u0434\u0430 \u0438\u043b\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438\n\u2022 \u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u2014 \u043d\u0430\u0445\u043e\u0434\u0438\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c, \u0444\u0430\u0437\u0437\u0435\u0440 \u0438\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\n\u2022 \u0412\u043e\u043e\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u2014 \u0438\u0437 \u0431\u0430\u0433\u0430 \u0441\u043e\u0431\u0438\u0440\u0430\u044e\u0442 \u0431\u043e\u0435\u0432\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0441 \u043e\u0431\u0444\u0443\u0441\u043a\u0430\u0446\u0438\u0435\u0439\n\u2022 \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u2014 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0442\u0438\u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0446\u0435\u043b\u0435\u0439\n\u2022 \u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438 \u043f\u0430\u0442\u0447 \u2014 \u0432\u0435\u043d\u0434\u043e\u0440 \u0443\u0437\u043d\u0430\u0451\u0442, \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0443 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\n\u2022 \u0420\u0430\u0437\u0432\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u2014 \u043f\u0430\u0442\u0447 \u0432\u044b\u043f\u0443\u0449\u0435\u043d, \u043d\u043e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0442\u0435\u0441\u0442\u0438\u0440\u0443\u044e\u0442, \u0441\u043e\u0433\u043b\u0430\u0441\u043e\u0432\u044b\u0432\u0430\u044e\u0442 \u043e\u043a\u043d\u0430 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u044f, \u043a\u0430\u0442\u044f\u0442 \u043a\u0430\u0441\u043a\u0430\u0434\u043d\u043e\n\n\u0418 \u0432\u043e\u0442 \u043f\u0430\u0440\u0430\u0434\u043e\u043a\u0441: \u043f\u043e\u0441\u043b\u0435 \u043f\u044f\u0442\u043e\u0433\u043e \u044d\u0442\u0430\u043f\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435 \u0438\u0441\u0447\u0435\u0437\u0430\u0435\u0442. \u041e\u043d\u0430 \u043f\u0440\u043e\u0441\u0442\u043e \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u0442 \u0438\u0437 \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438 0-day \u0432 n-day, \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442\u0441\u044f \u2014 \u0438\u043d\u043e\u0433\u0434\u0430 \u0442\u0435 \u0441\u0430\u043c\u044b\u0435 29 \u043c\u0435\u0441\u044f\u0446\u0435\u0432.\n\n\u27a1\ufe0f\u0412 \u043f\u043e\u043b\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u2014 CVSS-\u0432\u0435\u043a\u0442\u043e\u0440\u044b \u0441 \u043f\u043e\u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043d\u044b\u043c \u0440\u0430\u0437\u0431\u043e\u0440\u043e\u043c, \u043c\u0430\u043f\u043f\u0438\u043d\u0433 \u043d\u0430 MITRE ATT&CK \u0438 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0447\u0435\u043a\u043b\u0438\u0441\u0442 \u0434\u043b\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\nhttps://codeby.net/threads/uyazvimost-nulevogo-dnya-zhiznennyi-tsikl-real-nyye-cve-i-protsess-patchinga.94896/", "url": "https://t.me/codeby_sec/10321", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-10T12:00:03.707Z", "date_only": false, "value": "2026-08-10T12:00:03.707754Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ics_cert/1414", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "b9389d0a-15d3-4f91-a930-303fa3e5bf38", "content": "\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0633\u06cc\u0633\u062a\u0645 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0645\u062a\u0645\u0631\u06a9\u0632 \u0634\u0628\u06a9\u0647 Cisco Catalyst SD-WAN Manager \u0648 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u06a9\u0646\u062a\u0631\u0644 \u062a\u0631\u0627\u0641\u06cc\u06a9 Cisco Catalyst SD-WAN Controller\u060c \u0646\u0627\u0634\u06cc \u0627\u0632 \u0646\u0642\u0635 \u062f\u0631 \u0645\u06a9\u0627\u0646\u06cc\u0632\u0645 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0627\u0633\u062a. \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u06cc\u06a9 \u0647\u06a9\u0631 \u06a9\u0647 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0639\u0645\u0644 \u0645\u06cc\u200c\u06a9\u0646\u062f\u060c \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u0628\u0627 \u0627\u0631\u0633\u0627\u0644 \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627\u06cc \u062e\u0627\u0635\u060c \u0628\u0647 \u0637\u0648\u0631 \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0628\u0647 \u0633\u06cc\u0633\u062a\u0645 \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0646\u062f.\n\nBDU:2026-02299\nCVE-2026-20127\n\n\u0646\u0635\u0628 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627 \u0627\u0632 \u0645\u0646\u0627\u0628\u0639 \u0645\u0639\u062a\u0628\u0631. \u0628\u0627 \u062a\u0648\u062c\u0647 \u0628\u0647 \u0634\u0631\u0627\u06cc\u0637 \u0641\u0639\u0644\u06cc \u0648 \u062a\u062d\u0631\u06cc\u0645\u200c\u0647\u0627\u06cc \u0627\u0639\u0645\u0627\u0644 \u0634\u062f\u0647 \u0639\u0644\u06cc\u0647 \u0641\u062f\u0631\u0627\u0633\u06cc\u0648\u0646 \u0631\u0648\u0633\u06cc\u0647\u060c \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627\u06cc \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0631\u0627 \u0641\u0642\u0637 \u067e\u0633 \u0627\u0632 \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u062a\u0645\u0627\u0645 \u062e\u0637\u0631\u0627\u062a \u0645\u0631\u062a\u0628\u0637\u060c \u0646\u0635\u0628 \u06a9\u0646\u06cc\u062f.\n\n\u0627\u0642\u062f\u0627\u0645\u0627\u062a \u062c\u0628\u0631\u0627\u0646\u06cc:\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0641\u0627\u06cc\u0631\u0648\u0627\u0644\u200c\u0647\u0627 \u0628\u0631\u0627\u06cc \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0628\u0647 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u061b\n- \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u060c \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0631\u0648\u0634 \"\u0644\u06cc\u0633\u062a \u0633\u0641\u06cc\u062f\" (\u0641\u0642\u0637 \u0627\u062c\u0627\u0632\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0648 \u0634\u0628\u06a9\u0647\u200c\u0647\u0627\u06cc \u0645\u062c\u0627\u0632).\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc SIEM \u0628\u0631\u0627\u06cc \u0631\u062f\u06cc\u0627\u0628\u06cc \u0631\u0648\u06cc\u062f\u0627\u062f\u0647\u0627\u06cc \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0641\u0639\u0627\u0644\u06cc\u062a\u200c\u0647\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646\u06cc \u06a9\u0647 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0646\u0634\u062f\u0647\u200c\u0627\u0646\u062f.\n- \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0627\u0632 \u0634\u0628\u06a9\u0647\u200c\u0647\u0627\u06cc \u062e\u0627\u0631\u062c\u06cc (\u0627\u06cc\u0646\u062a\u0631\u0646\u062a).\n\n\u0628\u0631\u0627\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0628\u06cc\u0634\u062a\u0631:\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa-EHchtZk\n\ud83d\udca1\u0627\u06af\u0631 \u0627\u06cc\u0646 \u0645\u062a\u0646 \u062f\u06cc\u062f\u06af\u0627\u0647 \u0634\u0645\u0627 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u060c \u0628\u0627\u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u062f. \n\ud83c\udfed\u00a0 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n@pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645 :\nhttps://t.me/ICSCERT_IR\n\u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2\n\u06af\u0631\u0648\u0647 \u062a\u062e\u0635\u0635\u06cc \u0648\u0627\u062a\u0633 \u0627\u067e:\nhttps://chat.whatsapp.com/BZu1yr1aeHpCDxiIXotzyW?mode=ac_t\n\u0628\u0647 \u0627\u0646\u062c\u0645\u0646 \u062a\u062e\u0635\u0635\u06cc AI.Sec :\nhttps://chat.whatsapp.com/KRPUA6WM4f6AdS727vRBmM?mode=ems_copy_t\n\u06a9\u0627\u0646\u0627\u0644 \u0628\u0644\u0647\nhttps://ble.ir/otsec", "url": "https://t.me/ics_cert/1414"}, {"timestamp": "2026-08-11T00:00:08.045Z", "date_only": false, "value": "2026-08-11T00:00:08.045848Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ics_cert/1414", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "3001d87a-2cce-47ed-a35b-02590bfd5b36", "content": "\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0633\u06cc\u0633\u062a\u0645 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0645\u062a\u0645\u0631\u06a9\u0632 \u0634\u0628\u06a9\u0647 Cisco Catalyst SD-WAN Manager \u0648 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u06a9\u0646\u062a\u0631\u0644 \u062a\u0631\u0627\u0641\u06cc\u06a9 Cisco Catalyst SD-WAN Controller\u060c \u0646\u0627\u0634\u06cc \u0627\u0632 \u0646\u0642\u0635 \u062f\u0631 \u0645\u06a9\u0627\u0646\u06cc\u0632\u0645 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0627\u0633\u062a. \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u06cc\u06a9 \u0647\u06a9\u0631 \u06a9\u0647 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0639\u0645\u0644 \u0645\u06cc\u200c\u06a9\u0646\u062f\u060c \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u0628\u0627 \u0627\u0631\u0633\u0627\u0644 \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627\u06cc \u062e\u0627\u0635\u060c \u0628\u0647 \u0637\u0648\u0631 \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0628\u0647 \u0633\u06cc\u0633\u062a\u0645 \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0646\u062f.\n\nBDU:2026-02299\nCVE-2026-20127\n\n\u0646\u0635\u0628 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627 \u0627\u0632 \u0645\u0646\u0627\u0628\u0639 \u0645\u0639\u062a\u0628\u0631. \u0628\u0627 \u062a\u0648\u062c\u0647 \u0628\u0647 \u0634\u0631\u0627\u06cc\u0637 \u0641\u0639\u0644\u06cc \u0648 \u062a\u062d\u0631\u06cc\u0645\u200c\u0647\u0627\u06cc \u0627\u0639\u0645\u0627\u0644 \u0634\u062f\u0647 \u0639\u0644\u06cc\u0647 \u0641\u062f\u0631\u0627\u0633\u06cc\u0648\u0646 \u0631\u0648\u0633\u06cc\u0647\u060c \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627\u06cc \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0631\u0627 \u0641\u0642\u0637 \u067e\u0633 \u0627\u0632 \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u062a\u0645\u0627\u0645 \u062e\u0637\u0631\u0627\u062a \u0645\u0631\u062a\u0628\u0637\u060c \u0646\u0635\u0628 \u06a9\u0646\u06cc\u062f.\n\n\u0627\u0642\u062f\u0627\u0645\u0627\u062a \u062c\u0628\u0631\u0627\u0646\u06cc:\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0641\u0627\u06cc\u0631\u0648\u0627\u0644\u200c\u0647\u0627 \u0628\u0631\u0627\u06cc \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0628\u0647 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u061b\n- \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u060c \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0631\u0648\u0634 \"\u0644\u06cc\u0633\u062a \u0633\u0641\u06cc\u062f\" (\u0641\u0642\u0637 \u0627\u062c\u0627\u0632\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0648 \u0634\u0628\u06a9\u0647\u200c\u0647\u0627\u06cc \u0645\u062c\u0627\u0632).\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc SIEM \u0628\u0631\u0627\u06cc \u0631\u062f\u06cc\u0627\u0628\u06cc \u0631\u0648\u06cc\u062f\u0627\u062f\u0647\u0627\u06cc \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0641\u0639\u0627\u0644\u06cc\u062a\u200c\u0647\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646\u06cc \u06a9\u0647 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0646\u0634\u062f\u0647\u200c\u0627\u0646\u062f.\n- \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0627\u0632 \u0634\u0628\u06a9\u0647\u200c\u0647\u0627\u06cc \u062e\u0627\u0631\u062c\u06cc (\u0627\u06cc\u0646\u062a\u0631\u0646\u062a).\n\n\u0628\u0631\u0627\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0628\u06cc\u0634\u062a\u0631:\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa-EHchtZk\n\ud83d\udca1\u0627\u06af\u0631 \u0627\u06cc\u0646 \u0645\u062a\u0646 \u062f\u06cc\u062f\u06af\u0627\u0647 \u0634\u0645\u0627 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u060c \u0628\u0627\u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u062f. \n\ud83c\udfed\u00a0 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n@pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645 :\nhttps://t.me/ICSCERT_IR\n\u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2\n\u06af\u0631\u0648\u0647 \u062a\u062e\u0635\u0635\u06cc \u0648\u0627\u062a\u0633 \u0627\u067e:\nhttps://chat.whatsapp.com/BZu1yr1aeHpCDxiIXotzyW?mode=ac_t\n\u0628\u0647 \u0627\u0646\u062c\u0645\u0646 \u062a\u062e\u0635\u0635\u06cc AI.Sec :\nhttps://chat.whatsapp.com/KRPUA6WM4f6AdS727vRBmM?mode=ems_copy_t\n\u06a9\u0627\u0646\u0627\u0644 \u0628\u0644\u0647\nhttps://ble.ir/otsec", "url": "https://t.me/ics_cert/1414", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-29T06:00:04.260Z", "date_only": false, "value": "2026-08-29T06:00:04.260611Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/xhqcankao/27576", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "ef183b1f-f5ad-49d1-86a2-d264a5f50aed", "content": "\u601d\u79d1\u4fee\u8865 SD-WAN \u7cfb\u7edf\u6ee1\u5206\u96f6\u65e5\u6f0f\u6d1e\n\n\u601d\u79d1\u516c\u53f8\u516c\u5e03\u5e76\u4fee\u8865 SD-WAN \u7cfb\u7edf\u6ee1\u5206\u7f51\u7edc\u6f0f\u6d1e CVE-2026-20127 \uff0c\u901a\u62a5\u6b64\u4e8b\u7684\u6fb3\u5927\u5229\u4e9a\u7f51\u7edc\u5b89\u5168\u4e2d\u5fc3\u6307\u51fa\uff0c\u8fd9\u4e00\u6f0f\u6d1e\u7591\u4f3c\u5728\u4e09\u5e74\u524d\u5c31\u88ab\u5229\u7528\uff0c\u7f8e\u56fd\u7f51\u7edc\u5b89\u5168\u548c\u57fa\u7840\u8bbe\u65bd\u5b89\u5168\u5c40\u4e5f\u7f55\u89c1\u53d1\u5e03\u7d27\u6025\u6307\u4ee4\uff0c\u8981\u6c42\u6240\u6709\u8054\u90a6\u673a\u6784\u76d8\u70b9\u601d\u79d1 SD-WAN \u7cfb\u7edf\uff0c\u6e05\u67e5\u662f\u5426\u6709\u906d\u5230\u5165\u4fb5\u7684\u60c5\u5f62\u3002\u8be5\u6f0f\u6d1e\u5b58\u5728\u4e8eCatalyst SD-WAN Controller\u4e0eCatalyst SD-WAN Manager\uff0c\u672a\u7ecf\u8eab\u4efd\u9a8c\u8bc1\u7684\u653b\u51fb\u8005\u53ef\u7ed5\u8fc7\u8eab\u4efd\u9a8c\u8bc1\u5e76\u5f97\u5230\u7ba1\u7406\u5458\u6743\u9650\uff0cCVSS \u98ce\u9669\u8fbe\u523010\u5206\u3002\u9488\u5bf9\u6f0f\u6d1e\u5f62\u6210\u7684\u539f\u56e0\uff0c\u601d\u79d1\u6307\u51fa\u662f\u5bf9\u7b49\u8eab\u4efd\u9a8c\u8bc1\u673a\u5236\u672a\u6b63\u5e38\u8fd0\u4f5c\u9020\u6210\uff0c\u653b\u51fb\u8005\u53ef\u53d1\u9001\u7279\u5236\u8bf7\u6c42\u89e6\u53d1\u6f0f\u6d1e\uff0c\u4e00\u65e6\u6210\u529f\u5229\u7528\uff0c\u4ed6\u4eec\u5c31\u80fd\u5b58\u53d6\u5185\u90e8\u7684\u9ad8\u6743\u9650\u4f7f\u7528\u8005\u5e10\u53f7\uff08\u975eroot\uff09\u3002\n\n\u2014\u2014 ithome.com.tw", "url": "https://t.me/xhqcankao/27576", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-29T20:00:17.289Z", "date_only": false, "value": "2026-08-29T20:00:17.289588Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberDispatch/1348", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "3a221a55-b4c3-4b45-893d-662d61ebf922", "content": "CISA Adds 8 Actively Exploited Vulnerabilities to KEV Catalog\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) urgently added eight zero-day vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog on April 20, 2026, confirming active exploitation across enterprise tools from Cisco, Quest, PaperCut, TeamCity, Kentico, and Zimbra.\n\nKey flaws include three Cisco SD-WAN vulnerabilities\u2014CVE-2026-20127 (authentication bypass), CVE-2022-20775 (privilege escalation), and CVE-2026-20133 (sensitive info exposure)\u2014plus CVE-2025-32975 (CVSS 10.0) in Quest KACE SMA, enabling full user impersonation without credentials.\n\nOthers: CVE-2023-27351 (PaperCut improper auth, CVSS 8.2); CVE-2024-27199 (TeamCity path traversal, CVSS 7.3); CVE-2025-2749 (Kentico path traversal, CVSS 7.2).", "url": "https://t.me/CyberDispatch/1348"}, {"timestamp": "2026-09-01T17:00:12.679Z", "date_only": false, "value": "2026-09-01T17:00:12.679152Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/7871", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "98ebab96-3498-4ffb-b90a-8c011b8e869d", "content": "When Network Infrastructure Becomes \nthe Initial Access Vector\n\nOver the past weeks, several critical vulnerabilities and active exploitations have surfaced across major enterprise infrastructure platforms highlighting once again that security perimeters are increasingly defined by mismanaged infrastructure components.\n\nHere are a few developments worth paying attention to:\n\n1. Cisco Catalyst SD-WAN Controllers (CVSS 10.0)\n\nCisco warned of active exploitation of CVE-2026-20127, allowing unauthenticated attackers to bypass authentication and gain administrative access. Researchers linked the activity to the UAT-8616 threat cluster, with indicators suggesting malicious control-plane peers and privilege escalation to root.\n\nImpact:\nCompromise of SD-WAN controllers effectively means control over the enterprise network fabric.\n\n2. Microsoft MSHTML Zero-Day (CVE-2026-21513)\n\nMicrosoft patched a vulnerability in ieframe.dll enabling attackers to bypass Mark of the Web protections and Internet Explorer ESC. A malicious LNK sample linked to APT28 infrastructure demonstrates how legacy components continue to provide viable entry points.\n\nImpact:\nMalicious documents can trigger code execution paths in environments that still rely on MSHTML rendering components.\n\n\n3. Additional Cisco SD-WAN Manager Exploits\n\nCisco confirmed exploitation of two additional flaws:\n\u2022 CVE-2026-20122 \u2013 arbitrary file overwrite using API credentials\n\u2022 CVE-2026-20128 \u2013 post login data exposure and privilege escalation (DCA)\n\nImpact:\nThese flaws demonstrate how API surfaces and management planes remain high-value attack targets.\n\n4. FortiGate as an Initial Breach Vector\n\nA recent SentinelOne investigation shows attackers abusing FortiGate devices to extract configuration files containing Active Directory service account credentials\nOnce obtained, adversaries:\n\u2022 Register rogue machines\n\u2022 Move laterally inside the network\n\u2022 Conduct internal reconnaissance\n\nImpact:\nSecurity appliances themselves are increasingly becoming the first compromised asset in breach chains.\n\nKey Takeaway\nThe pattern across these incidents is clear:\nInfrastructure security \u2260 device hardening alone.\n\nOrganizations need:\n\u2022 Continuous patch governance\ud83e\udd19\ud83c\udffe\n\u2022 Management plane isolation\n\u2022 Credential hygiene in network appliances\n\u2022 Detection capabilities focused on control plane anomalies\n\u2022 SOC playbooks covering network infrastructure compromise\ud83e\udd19\ud83c\udffe\n\nIn many breaches today, the firewall, SD-WAN controller, or edge appliance becomes the attacker\u2019s first domain controller.\n\n\u2014 CISO as a Service \u2014\nStrategic Cyber Defense & GRC\nResilient Through Knowledge\n2026.03.12\n\n#CyberSecurity #ThreatIntelligence #SDWAN #Fortinet #CiscoSecurity #ZeroDay #APT28 #SecurityGovernance #SOC #vCISO\n\nhttps://www.linkedin.com/posts/alirezaghahrood_cybersecurity-threatintelligence-sdwan-share-7437860289229910017-U23V", "url": "https://t.me/cissp/7871"}, {"timestamp": "2026-09-13T20:00:05.027Z", "date_only": false, "value": "2026-09-13T20:00:05.027654Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CYPERMRED/82", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "93d3a75b-ff6e-4569-a389-d35def6a9d2c", "content": "\ud83d\udee1 \u0623\u0628\u0631\u0632 \u0627\u0644\u0623\u062e\u0628\u0627\u0631 \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a\u0629 \u0644\u0647\u0630\u0627 \u0627\u0644\u0623\u0633\u0628\u0648\u0639 .\n\n\ud83d\uddd3 \u062a\u0627\u0631\u064a\u062e \u0627\u0644\u064a\u0648\u0645: 15 \u0645\u0627\u064a\u0648 2026\n\n\u2705 \u0637\u0648\u0631 \u0645\u0647\u0627\u0631\u062a\u0643 \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a\u0629 \u0639\u0628\u0631 \u0627\u0644\u062f\u0648\u0631\u0627\u062a \u0627\u0644\u0627\u062d\u062a\u0631\u0627\u0641\u064a\u0629 \u0639\u0644\u0649 \u0623\u0643\u0627\u062f\u064a\u0645\u064a\u0629 \u0627\u0644\u062f\u0631\u0639 \u0627\u0644\u0623\u062e\u0636\u0631 \ud83d\udc47\ud83c\udffb\nhttps://greenarmor.academy\n\n\n1\ufe0f\u20e3 \u0634\u0631\u0643\u0629 Cisco\u060c \u062b\u063a\u0631\u0629 \u062d\u0631\u062c\u0629 \u0641\u064a SD-WAN:\n\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0641\u0639\u0644\u064a \u0644\u062b\u063a\u0631\u0629 CVE-2026-20127 \u0628\u062a\u0642\u064a\u064a\u0645 CVSS 10.0 \u0641\u064a Cisco Catalyst SD-WAN Controller\u060c \u0648\u0642\u062f \u062a\u0633\u0645\u062d \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u0628\u062a\u062c\u0627\u0648\u0632 \u0627\u0644\u0645\u0635\u0627\u062f\u0642\u0629 \u0648\u0627\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0635\u0644\u0627\u062d\u064a\u0627\u062a \u0625\u062f\u0627\u0631\u064a\u0629.\n\ud83d\udccc https://thehackernews.com/2026/02/cisco-sd-wan-zero-day-cve-2026-20127.html\n\n2\ufe0f\u20e3 \u0645\u0646\u0635\u0629 Ollama\u060c \u062a\u0633\u0631\u064a\u0628 \u0630\u0627\u0643\u0631\u0629 \u0645\u0646 \u062e\u0648\u0627\u062f\u0645 \u0627\u0644\u0630\u0643\u0627\u0621 \u0627\u0644\u0627\u0635\u0637\u0646\u0627\u0639\u064a:\n\u062b\u063a\u0631\u0629 CVE-2026-7482 \u0642\u062f \u062a\u0633\u0645\u062d \u0644\u0645\u0647\u0627\u062c\u0645 \u0639\u0646 \u0628\u064f\u0639\u062f \u0648\u0628\u062f\u0648\u0646 \u0645\u0635\u0627\u062f\u0642\u0629 \u0628\u062a\u0633\u0631\u064a\u0628 \u0630\u0627\u0643\u0631\u0629 \u0627\u0644\u0639\u0645\u0644\u064a\u0629 \u0639\u0628\u0631 \u0645\u0644\u0641\u0627\u062a GGUF \u062e\u0628\u064a\u062b\u0629\u060c \u0645\u0639 \u0627\u062d\u062a\u0645\u0627\u0644 \u062a\u0623\u062b\u0631 \u0623\u0643\u062b\u0631 \u0645\u0646 300,000 \u062e\u0627\u062f\u0645 \u0645\u0643\u0634\u0648\u0641. \n\ud83d\udccc https://thehackernews.com/2026/05/ollama-out-of-bounds-read-vulnerability.html\n\n3\ufe0f\u20e3 \u0634\u0631\u0643\u0629 Microsoft\u060c \u062a\u062d\u062f\u064a\u062b\u0627\u062a \u0623\u0645\u0646\u064a\u0629 \u0648\u0627\u0633\u0639\u0629:\n\u0645\u0627\u064a\u0643\u0631\u0648\u0633\u0648\u0641\u062a \u0623\u0635\u062f\u0631\u062a \u062a\u062d\u062f\u064a\u062b\u0627\u062a \u0644\u0645\u0639\u0627\u0644\u062c\u0629 138 \u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 \u0641\u064a \u0645\u0646\u062a\u062c\u0627\u062a\u0647\u0627\u060c \u0645\u0646 \u0628\u064a\u0646\u0647\u0627 \u062b\u063a\u0631\u0627\u062a \u062d\u0631\u062c\u0629 \u0641\u064a Windows DNS \u0648Netlogon \u0648Azure \u0648Dynamics 365 \u0648Hyper-V. \n\ud83d\udccc https://thehackernews.com/2026/05/microsoft-patches-138-vulnerabilities.html\n\n4\ufe0f\u20e3 \u0646\u0638\u0627\u0645 Windows\u060c \u062b\u063a\u0631\u0627\u062a Zero-Day \u062c\u062f\u064a\u062f\u0629:\n\u062a\u0645 \u0646\u0634\u0631 \u062a\u0641\u0627\u0635\u064a\u0644 \u062b\u063a\u0631\u062a\u064a\u0646 \u0644\u0645 \u064a\u062a\u0645 \u0627\u0635\u0644\u0627\u062d\u0647\u0645 \u0628\u0639\u062f \u0641\u064a Windows: YellowKey \u0644\u062a\u062c\u0627\u0648\u0632 BitLocker\u060c \u0648GreenPlasma \u0644\u062a\u0635\u0639\u064a\u062f \u0627\u0644\u0635\u0644\u0627\u062d\u064a\u0627\u062a \u0639\u0628\u0631 CTFMON. \n\ud83d\udccc https://thehackernews.com/2026/05/windows-zero-days-expose-bitlocker.html\n\n5\ufe0f\u20e3 \u0645\u0646\u0635\u0629 cPanel\u060c \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0648\u0627\u0633\u0639 \u0644\u062b\u063a\u0631\u0629 \u062e\u0637\u064a\u0631\u0629:\n\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0646\u0634\u0637 \u0644\u062b\u063a\u0631\u0629 CVE-2026-41940 \u0641\u064a cPanel \u0648WHM \u0644\u0646\u0634\u0631 Backdoor \u0628\u0627\u0633\u0645 Filemanager\u060c \u0645\u0639 \u0631\u0628\u0637 \u0627\u0644\u062d\u0645\u0644\u0629 \u0628\u062c\u0647\u0629 \u062a\u0647\u062f\u064a\u062f \u062a\u064f\u0639\u0631\u0641 \u0628\u0627\u0633\u0645 Mr_Rot13. \n\ud83d\udccc https://thehackernews.com/2026/05/cpanel-cve-2026-41940-under-active.html\n\n6\ufe0f\u20e3 \u0634\u0631\u0643\u0629 Palo Alto Networks\u060c \u062b\u063a\u0631\u0629 \u062e\u0637\u064a\u0631\u0629 \u0641\u064a PAN-OS:\n\u062b\u063a\u0631\u0629 CVE-2026-0300 \u0641\u064a User-ID Authentication Portal \u062a\u0633\u0645\u062d \u0628\u062a\u0646\u0641\u064a\u0630 \u0643\u0648\u062f \u0639\u0646 \u0628\u064f\u0639\u062f \u0628\u0635\u0644\u0627\u062d\u064a\u0627\u062a root \u0639\u0644\u0649 \u0623\u062c\u0647\u0632\u0629 PA-Series \u0648VM-Series\u060c \u0648\u062a\u0645 \u0631\u0635\u062f \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0641\u0639\u0644\u064a\u064b\u0627. \n\ud83d\udccc https://thehackernews.com/2026/05/palo-alto-pan-os-flaw-under-active.html\n\n7\ufe0f\u20e3 \u062e\u0627\u062f\u0645 Exim\u060c \u062b\u063a\u0631\u0629 Dead.Letter\n\u062b\u063a\u0631\u0629 CVE-2026-45185 \u0641\u064a Exim: \u0639\u0646\u062f \u0627\u0633\u062a\u062e\u062f\u0627\u0645 GnuTLS \u0642\u062f \u062a\u0624\u062f\u064a \u0625\u0644\u0649 \u062a\u0644\u0641 \u0641\u064a \u0627\u0644\u0630\u0627\u0643\u0631\u0629 \u0648\u0631\u0628\u0645\u0627 \u062a\u0646\u0641\u064a\u0630 \u0643\u0648\u062f \u0639\u0646 \u0628\u064f\u0639\u062f\u060c \u0644\u0630\u0644\u0643 \u064a\u064f\u0646\u0635\u062d \u0628\u0627\u0644\u062a\u062d\u062f\u064a\u062b \u0641\u0648\u0631\u064b\u0627. \n\ud83d\udccc https://thehackernews.com/2026/05/new-exim-bdat-vulnerability-exposes.html\n\n8\ufe0f\u20e3 \u0633\u0644\u0633\u0644\u0629 \u062a\u0648\u0631\u064a\u062f\u060c Mini Shai-Hulud:\n\u062d\u0645\u0644\u0629 Supply Chain \u062e\u0628\u064a\u062b\u0629 \u0627\u0633\u062a\u0647\u062f\u0641\u062a \u062d\u0632\u0645 npm \u0648PyPI \u0645\u0631\u062a\u0628\u0637\u0629 \u0628\u0645\u0634\u0627\u0631\u064a\u0639 \u0645\u062b\u0644 TanStack \u0648Mistral AI \u0648Guardrails AI\u060c \u0645\u0639 \u0633\u0631\u0642\u0629 \u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0639\u062a\u0645\u0627\u062f \u0648GitHub/OIDC tokens. \n\ud83d\udccc https://thehackernews.com/2026/05/mini-shai-hulud-worm-compromises.html\n\n9\ufe0f\u20e3 \u0645\u0646\u0635\u0629 Hugging Face\u060c \u0645\u0633\u062a\u0648\u062f\u0639 OpenAI \u0645\u0632\u064a\u0641:\n\u0645\u0633\u062a\u0648\u062f\u0639 \u062e\u0628\u064a\u062b \u0627\u0646\u062a\u062d\u0644 \u0627\u0633\u0645 OpenAI Privacy Filter \u0648\u0648\u0635\u0644 \u0625\u0644\u0649 \u0627\u0644\u0645\u0631\u0643\u0632 \u0627\u0644\u0623\u0648\u0644 \u0641\u064a \u0627\u0644\u062a\u0631\u0646\u062f\u060c \u0648\u062d\u0642\u0642 \u0646\u062d\u0648 244,000 \u062a\u062d\u0645\u064a\u0644 \u062e\u0644\u0627\u0644 18 \u0633\u0627\u0639\u0629\u060c \u0648\u0643\u0627\u0646 \u064a\u0646\u0634\u0631 Infostealer \u0639\u0644\u0649 \u0623\u062c\u0647\u0632\u0629 Windows. \n\ud83d\udccc https://thehackernews.com/2026/05/fake-openai-privacy-filter-repo-hits-1.html\n\n\ud83d\udd1f \u0646\u0638\u0627\u0645 Linux\u060c \u062b\u063a\u0631\u0629 Fragnesia \u0644\u062a\u0635\u0639\u064a\u062f \u0627\u0644\u0635\u0644\u0627\u062d\u064a\u0627\u062a:\n\u062b\u063a\u0631\u0629 CVE-2026-46300 \u0627\u0644\u0645\u0639\u0631\u0648\u0641\u0629 \u0628\u0627\u0633\u0645 Fragnesia \u062a\u0633\u0645\u062d \u0644\u0645\u0633\u062a\u062e\u062f\u0645 \u0645\u062d\u0644\u064a \u0628\u062a\u0635\u0639\u064a\u062f \u0627\u0644\u0635\u0644\u0627\u062d\u064a\u0627\u062a \u0625\u0644\u0649 root \u0639\u0628\u0631 \u062e\u0644\u0644 \u0641\u064a Linux Kernel\u060c \u0648\u0647\u064a \u0645\u0631\u062a\u0628\u0637\u0629 \u0628\u0633\u0644\u0633\u0644\u0629 Dirty Frag. \n\ud83d\udccc https://www.microsoft.com/en-us/security/blog/2026/05/08/active-attack-dirty-frag-linux-vulnerability-expands-post-compromise-risk/\n\n1\ufe0f\u20e31\ufe0f\u20e3 \u062e\u0627\u062f\u0645 NGINX\u060c \u062b\u063a\u0631\u0629 \u0639\u0645\u0631\u0647\u0627 18 \u0633\u0646\u0629:\n\u062b\u063a\u0631\u0629 NGINX Rift CVE-2026-42945 \u0641\u064a ngx_http_rewrite_module \u0642\u062f \u062a\u0633\u0645\u062d \u0628\u062a\u0646\u0641\u064a\u0630 \u0643\u0648\u062f \u0639\u0646 \u0628\u064f\u0639\u062f \u0623\u0648 \u062a\u0639\u0637\u064a\u0644 \u0627\u0644\u062e\u062f\u0645\u0629 \u0639\u0628\u0631 \u0637\u0644\u0628\u0627\u062a HTTP \u0645\u0635\u0645\u0645\u0629 \u062e\u0635\u064a\u0635\u064b\u0627. \n\ud83d\udccc https://thehackernews.com/2026/05/18-year-old-nginx-rewrite-module-flaw.html", "url": "https://t.me/CYPERMRED/82", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-01T11:57:50.489Z", "date_only": false, "value": "2026-10-01T11:57:50.489490Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mwssjz3dsw26", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "80f9f622-031f-4b05-92bd-2bdc369e3bfa", "content": "Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE\n\nThis article focuses heavily on remediation timelines and exploitation potential, but it downplays the risk of persistence if attackers are already inside via earlier vulnerabilities like CVE-2026-20127 \u2026", "url": "https://bsky.app/profile/arc-codex.com/post/3mwssjz3dsw26"}], "metrics": {"as_of": "2026-10-28T15:16:25.624Z", "anchors": {"origin": {"timestamp": "2026-02-25T00:00:00Z", "date_only": true, "value": "2026-02-25", "kind": "milestone", "label": "Published", "source": "certfr_alerte \u00b7 CERTFR-2026-ALE-002", "record": "CERTFR-2026-ALE-002", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-02-25T00:00:00Z", "date_only": true, "value": "2026-02-25", "kind": "milestone", "label": "Published", "source": "certfr_alerte \u00b7 CERTFR-2026-ALE-002", "record": "CERTFR-2026-ALE-002", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-03-10T00:38:46Z", "date_only": false, "value": "2026-03-10T00:38:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/realcodeb0ss/369", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "ca4f623f-420d-4535-b377-662d6f24bbf7", "content": "https://socprime.com/blog/cve-2026-20127-vulnerability/", "url": "https://t.me/realcodeb0ss/369", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2026-02-25T00:00:00Z", "date_only": false, "value": "2026-02-25T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2026-20127", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "0036be7f-5d6e-4585-9861-52a8e23b40b6", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 0.0, "hours": 0.0, "days": 0.0, "min_seconds": -86400.0, "max_seconds": 86400.0, "approximate": true, "ongoing": false, "order_known": false, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-02-25T00:00:00Z", "date_only": true, "value": "2026-02-25", "kind": "milestone", "label": "Published", "source": "certfr_alerte \u00b7 CERTFR-2026-ALE-002", "record": "CERTFR-2026-ALE-002", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-02-25T00:00:00Z", "date_only": false, "value": "2026-02-25T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2026-20127", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "0036be7f-5d6e-4585-9861-52a8e23b40b6", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 0.0, "hours": 0.0, "days": 0.0, "min_seconds": -86400.0, "max_seconds": 86400.0, "approximate": true, "ongoing": false, "order_known": false, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-02-25T00:00:00Z", "date_only": true, "value": "2026-02-25", "kind": "milestone", "label": "Published", "source": "certfr_alerte \u00b7 CERTFR-2026-ALE-002", "record": "CERTFR-2026-ALE-002", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-02-25T00:00:00Z", "date_only": false, "value": "2026-02-25T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2026-20127", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "0036be7f-5d6e-4585-9861-52a8e23b40b6", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 1125526.0, "hours": 312.6461111111111, "days": 13.026921296296296, "min_seconds": 1039126.0, "max_seconds": 1125526.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-02-25T00:00:00Z", "date_only": true, "value": "2026-02-25", "kind": "milestone", "label": "Published", "source": "certfr_alerte \u00b7 CERTFR-2026-ALE-002", "record": "CERTFR-2026-ALE-002", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-03-10T00:38:46Z", "date_only": false, "value": "2026-03-10T00:38:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/realcodeb0ss/369", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "ca4f623f-420d-4535-b377-662d6f24bbf7", "content": "https://socprime.com/blog/cve-2026-20127-vulnerability/", "url": "https://t.me/realcodeb0ss/369", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 21222985.624157, "hours": 5895.273784488056, "days": 245.63640768700233, "min_seconds": 21136585.624157, "max_seconds": 21222985.624157, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-02-25T00:00:00Z", "date_only": true, "value": "2026-02-25", "kind": "milestone", "label": "Published", "source": "certfr_alerte \u00b7 CERTFR-2026-ALE-002", "record": "CERTFR-2026-ALE-002", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-28T15:16:25.624Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 21222985.624157, "hours": 5895.273784488056, "days": 245.63640768700233, "min_seconds": 21136585.624157, "max_seconds": 21222985.624157, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-02-25T00:00:00Z", "date_only": false, "value": "2026-02-25T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2026-20127", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "0036be7f-5d6e-4585-9861-52a8e23b40b6", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-10-28T15:16:25.624Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 20097459.624157, "hours": 5582.627673376945, "days": 232.60948639070602, "min_seconds": 20097459.624157, "max_seconds": 20097459.624157, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-03-10T00:38:46Z", "date_only": false, "value": "2026-03-10T00:38:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/realcodeb0ss/369", "record": "CVE-2026-20127", "field": "creation_timestamp", "uuid": "ca4f623f-420d-4535-b377-662d6f24bbf7", "content": "https://socprime.com/blog/cve-2026-20127-vulnerability/", "url": "https://t.me/realcodeb0ss/369", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-10-28T15:16:25.624Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}