{"metadata": {"vulnerability": "CVE-2026-20184", "count": 54, "kinds": {"milestone": 9, "sighting": 24, "kev": 0, "other": 21}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0122", "record": "NCSC-2026-0122", "field": "document.tracking.generator.date"}, {"timestamp": "2025-10-08T11:59:15.394Z", "date_only": false, "value": "2025-10-08T11:59:15.394Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-20184", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-04-15T00:00:00Z", "date_only": true, "value": "2026-04-15", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0451", "record": "CERTFR-2026-AVI-0451", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-04-15T00:00:00Z", "date_only": false, "value": "2026-04-15T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-20184", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-04-15T00:00:00Z", "date_only": false, "value": "2026-04-15T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-20184", "record": "FKIE_CVE-2026-20184", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-04-15T15:52:49Z", "date_only": false, "value": "2026-04-15T15:52:49+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-WEBEX-CUI-CERT-8JSZYHWL", "record": "CISCO-SA-WEBEX-CUI-CERT-8JSZYHWL", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-04-15T16:00:00Z", "date_only": false, "value": "2026-04-15T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-WEBEX-CUI-CERT-8JSZYHWL", "record": "CISCO-SA-WEBEX-CUI-CERT-8JSZYHWL", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-04-15T16:03:59.646Z", "date_only": false, "value": "2026-04-15T16:03:59.646Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-20184", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-04-15T16:21:38.622Z", "date_only": false, "value": "2026-04-15T16:21:38.622755Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/AAKL/statuses/116409637135769540", "record": "CVE-2026-20184", "field": "creation_timestamp", "uuid": "8b248999-632c-4870-b8e9-fe63fe491db5", "url": "https://infosec.exchange/users/AAKL/statuses/116409637135769540"}, {"timestamp": "2026-04-15T17:17:03Z", "date_only": false, "value": "2026-04-15T17:17:03Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-HH5G-G7M5-5VXV", "record": "GHSA-HH5G-G7M5-5VXV", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-04-15T17:17:03.677Z", "date_only": false, "value": "2026-04-15T17:17:03.677", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-20184", "record": "FKIE_CVE-2026-20184", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-04-15T17:19:02.346Z", "date_only": false, "value": "2026-04-15T17:19:02.346555Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjkfor53q72w", "record": "CVE-2026-20184", "field": "creation_timestamp", "uuid": "12dfd7f0-21c2-499c-9857-17ef2a363dfc", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjkfor53q72w"}, {"timestamp": "2026-04-15T17:21:24.299Z", "date_only": false, "value": "2026-04-15T17:21:24.299358Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjkfsxtwqp2k", "record": "CVE-2026-20184", "field": "creation_timestamp", "uuid": "0e74a2c7-c8d5-46f6-9efd-27f1856bbc49", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjkfsxtwqp2k"}, {"timestamp": "2026-04-15T18:31:58Z", "date_only": false, "value": "2026-04-15T18:31:58Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-HH5G-G7M5-5VXV", "record": "GHSA-HH5G-G7M5-5VXV", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-04-15T18:31:58Z", "date_only": false, "value": "2026-04-15T18:31:58Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-HH5G-G7M5-5VXV", "record": "GHSA-HH5G-G7M5-5VXV", "field": "modified"}, {"timestamp": "2026-04-15T18:49:07.219Z", "date_only": false, "value": "2026-04-15T18:49:07.219003Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjkkpqw7wq2a", "record": "CVE-2026-20184", "field": "creation_timestamp", "uuid": "9069eca6-9939-4d50-b6f7-cd56bfcc6a12", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjkkpqw7wq2a"}, {"timestamp": "2026-04-15T19:21:39Z", "date_only": false, "value": "2026-04-15T19:21:39.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/6xMUJRZqtRnDjLonUkq3jsNG6gFtR8te4DLwG6ur_2vlp8I", "record": "CVE-2026-20184", "field": "creation_timestamp", "uuid": "aa18c93f-9598-46bc-abbe-2dc3523953c0", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-04-15T22:00:00Z", "date_only": false, "value": "2026-04-15T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1132", "record": "WID-SEC-W-2026-1132", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-04-15T22:00:00Z", "date_only": false, "value": "2026-04-15T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1132", "record": "WID-SEC-W-2026-1132", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-04-15T22:00:00Z", "date_only": false, "value": "2026-04-15T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1132", "record": "WID-SEC-W-2026-1132", "field": "vulnerabilities.1.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-04-15T22:00:00Z", "date_only": false, "value": "2026-04-15T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1132", "record": "WID-SEC-W-2026-1132", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-04-16T00:00:00Z", "date_only": false, "value": "2026-04-16T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0451", "record": "CERTFR-2026-AVI-0451", "field": "last_revision_date"}, {"timestamp": "2026-04-16T00:00:00Z", "date_only": false, "value": "2026-04-16T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0451", "record": "CERTFR-2026-AVI-0451", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-04-16T00:00:00Z", "date_only": false, "value": "2026-04-16T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0451", "record": "CERTFR-2026-AVI-0451", "field": "revisions.0.revision_date"}, {"timestamp": "2026-04-16T01:51:11Z", "date_only": false, "value": "2026-04-16T01:51:11.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-23", "record": "CVE-2026-20184", "field": "creation_timestamp", "uuid": "ada84309-3753-4b21-abb8-6cd8f05fcdd5", "url": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-23"}, {"timestamp": "2026-04-16T03:55:32.095Z", "date_only": false, "value": "2026-04-16T03:55:32.095Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-20184", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-16T09:27:00Z", "date_only": false, "value": "2026-04-16T09:27:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2026/04/cisco-patches-four-critical-identity.html", "record": "CVE-2026-20184", "field": "creation_timestamp", "uuid": "4dcf4b69-e486-48ff-bdaa-07d13a5016a2", "url": "https://thehackernews.com/2026/04/cisco-patches-four-critical-identity.html"}, {"timestamp": "2026-04-16T10:39:05.326Z", "date_only": false, "value": "2026-04-16T10:39:05.326+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1132", "record": "WID-SEC-W-2026-1132", "field": "document.tracking.generator.date"}, {"timestamp": "2026-04-16T10:51:01.280Z", "date_only": false, "value": "2026-04-16T10:51:01.280220Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mjmahtx3vk2o", "record": "CVE-2026-20184", "field": "creation_timestamp", "uuid": "6ee6dc08-e487-4572-b83b-aab0a6d3893c", "url": "https://bsky.app/profile/undercode.bsky.social/post/3mjmahtx3vk2o"}, {"timestamp": "2026-04-16T11:30:08.851Z", "date_only": false, "value": "2026-04-16T11:30:08.851302Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mjmcnr5qck2x", "record": "CVE-2026-20184", "field": "creation_timestamp", "uuid": "41684607-554b-4862-a908-102d768b60f8", "url": "https://bsky.app/profile/o2cloud.bsky.social/post/3mjmcnr5qck2x"}, {"timestamp": "2026-04-16T13:36:36.250Z", "date_only": false, "value": "2026-04-16T13:36:36.250494Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mjmjpswyoz23", "record": "cve-2026-20184", "field": "creation_timestamp", "uuid": "2ac27fa9-a94c-4288-b544-4890771a1a5d", "url": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mjmjpswyoz23"}, {"timestamp": "2026-04-16T13:57:34.626Z", "date_only": false, "value": "2026-04-16T13:57:34.626784Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mjmkv4zmwb2o", "record": "CVE-2026-20184", "field": "creation_timestamp", "uuid": "14331ccb-807c-41b0-ac6a-01fe568f0495", "url": "https://bsky.app/profile/undercode.bsky.social/post/3mjmkv4zmwb2o"}, {"timestamp": "2026-04-16T15:20:07Z", "date_only": false, "value": "2026-04-16T15:20:07.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/8110", "record": "CVE-2026-20184", "field": "creation_timestamp", "uuid": "8bf0c18a-e82c-4e74-9abe-fa1779f1d808", "content": "Cisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f 15 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 Webex \u0438 Identity Services Engine (ISE).\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430 Webex, CVE-2026-20184, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u044e \u0435\u0434\u0438\u043d\u043e\u0433\u043e \u0432\u0445\u043e\u0434\u0430 (SSO) \u0441 Control Hub \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u0434\u0430\u0432\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u043a \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0442\u043e\u043a\u0435\u043d \u0434\u043b\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c Webex.\n\nCisco \u0440\u0430\u0437\u0440\u0435\u0448\u0438\u043b\u0430 \u044d\u0442\u0443 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u0445 Webex, \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c \u0435\u0434\u0438\u043d\u044b\u0439 \u0432\u0445\u043e\u0434 (SSO), \u00ab\u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u043d\u043e\u0432\u044b\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 SAML \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (IdP) \u0432 Control Hub.\n\n\u041a\u0440\u043e\u043c \u0442\u043e\u0433\u043e, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0442\u0440\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 ISE, \u0434\u0432\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u2013 CVE-2026-20180 \u0438 CVE-2026-20186 \u2013 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u041e\u0421.\n\n\u041e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u044b \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u0430 \u0437\u0430\u0442\u0435\u043c \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root.\n\n\u0412 \u043e\u0434\u043d\u043e\u0443\u0437\u043b\u043e\u0432\u044b\u0445 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f\u0445 Cisco ISE \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f DoS, \u043f\u0440\u0435\u043f\u044f\u0442\u0441\u0442\u0432\u0443\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u043a \u0441\u0435\u0442\u0438 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u0435\u043a.\n\n\u0422\u0440\u0435\u0442\u044c\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c ISE, CVE-2026-20147, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0442\u0435\u043c \u0436\u0435 \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u043c, \u0447\u0442\u043e \u0438 \u0434\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041e\u0441\u0442\u0430\u0432\u0448\u0438\u0435\u0441\u044f 11 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 Cisco, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u0432\u0435\u0434\u0443\u0449\u0438\u0435 \u043a \u0430\u0442\u0430\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438, XSS, \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0443\u0442\u0435\u0447\u043a\u0430\u043c \u0444\u0430\u0439\u043b\u043e\u0432, \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0430\u0442\u0430\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434.\n\nCisco \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442 \u043e\u0431 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. \u041d\u043e \u0432\u0441\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043c\u0435\u043d\u044f\u0442\u044c\u0441\u044f.\n\n\u041f\u043e\u043c\u0438\u043c\u043e Cisco \u043d\u043e\u0432\u044b\u043c\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u00ab\u043e\u0431\u0440\u0430\u0434\u043e\u0432\u0430\u043b\u0430\u00bb Splunk, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044f \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Splunk Enterprise, Cloud Platform \u0438 MCP Server, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u043f\u0430\u043a\u0435\u0442\u0430\u0445 \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432.\n\n\u0412 Splunk Enterprise and Cloud Platform \u0432\u0441\u043a\u0440\u044b\u0442\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, CVE-2026-20204, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u0432\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0438 RCE.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Splunk, \u043e\u0448\u0438\u0431\u043a\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0435\u0439 \u0432 \u044d\u0442\u043e\u043c \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435.\n\n\u0412 Splunk Enterprise \u0438 Cloud Platform \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0434\u0432\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u043d\u0438\u0445 \u043c\u043e\u0433\u043b\u0430 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0438\u043c\u0435\u043d \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u043d\u0443\u043b\u0435\u0432\u043e\u0439 \u0431\u0430\u0439\u0442 \u0438\u043b\u0438 \u0431\u0430\u0439\u0442, \u043d\u0435 \u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0432 UTF-8, \u0447\u0442\u043e \u043f\u0440\u0435\u043f\u044f\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u043e \u0438\u0445 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u044e \u0432 \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u0439 \u0444\u043e\u0440\u043c\u0430\u0442, \u0430 \u0434\u0440\u0443\u0433\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0438\u043b\u0438 \u0432\u044b\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0443\u0441\u043a\u043e\u0440\u0435\u043d\u0438\u0435 \u043c\u043e\u0434\u0435\u043b\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Splunk Enterprise \u0434\u043e 10.2.2, 10.0.5, 9.4.10, 9.3.11 \u0438\u043b\u0438 \u0432\u044b\u0448\u0435. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Splunk \u0435\u0449\u0435 \u0437\u0430\u043d\u0438\u043c\u0430\u0435\u0442\u0441\u044f.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 CVE-2026-20205, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0443\u044e \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 MCP Server, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0441\u0435\u0441\u0441\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0442\u043e\u043a\u0435\u043d\u044b \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435.\n\n\u0414\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043b\u0438\u0431\u043e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0444\u0430\u0439\u043b\u0430\u043c \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432, \u043b\u0438\u0431\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0438\u043d\u0434\u0435\u043a\u0441\u0430\u043c. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0448\u0438\u0431\u043a\u0438 \u0431\u044b\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u044e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f MCP Server 1.0.3. \n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u0448\u0438\u0431\u043e\u043a \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u043f\u0430\u043a\u0435\u0442\u0430\u0445 Splunk Enterprise, Operator for Kubernetes Add-on, \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 IT Service Intelligence (ITSI) \u0438 Universal Forwarder.\n\n\u0412 Splunk \u0442\u0430\u043a\u0436\u0435 \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u044e\u0442 \u043e \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.", "url": "https://t.me/true_secator/8110"}, {"timestamp": "2026-04-16T18:00:00Z", "date_only": false, "value": "2026-04-16T18:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260417", "record": "CVE-2026-20184", "field": "creation_timestamp", "uuid": "d9252cf1-d366-4415-8db2-f8a86552a9f6", "url": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260417"}, {"timestamp": "2026-04-16T18:52:15Z", "date_only": false, "value": "2026-04-16T18:52:15+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-WEBEX-CUI-CERT-8JSZYHWL", "record": "CISCO-SA-WEBEX-CUI-CERT-8JSZYHWL", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-04-16T18:52:15Z", "date_only": false, "value": "2026-04-16T18:52:15+00:00", "kind": "other", "label": "Updated", "source": "csaf_cisco \u00b7 CISCO-SA-WEBEX-CUI-CERT-8JSZYHWL", "record": "CISCO-SA-WEBEX-CUI-CERT-8JSZYHWL", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-04-16T18:52:18Z", "date_only": false, "value": "2026-04-16T18:52:18+00:00", "kind": "other", "label": "Document generated", "source": "csaf_cisco \u00b7 CISCO-SA-WEBEX-CUI-CERT-8JSZYHWL", "record": "CISCO-SA-WEBEX-CUI-CERT-8JSZYHWL", "field": "document.tracking.generator.date"}, {"timestamp": "2026-04-16T19:07:14.461Z", "date_only": false, "value": "2026-04-16T19:07:14.461Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-20184", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-04-16T19:07:14.461Z", "date_only": false, "value": "2026-04-16T19:07:14.461Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / cisco", "record": "CVE-2026-20184", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-17T02:13:42Z", "date_only": false, "value": "2026-04-17T02:13:42.000000Z", "kind": "sighting", "label": "Seen", "source": "https://ccb.belgium.be/advisories/warning-critical-improper-certificate-validation-cisco-webex-can-lead-user-impersonation", "record": "CVE-2026-20184", "field": "creation_timestamp", "uuid": "937386a8-7b5c-4470-89da-219bc2d0ea67", "url": "https://ccb.belgium.be/advisories/warning-critical-improper-certificate-validation-cisco-webex-can-lead-user-impersonation"}, {"timestamp": "2026-04-17T08:37:31.398Z", "date_only": false, "value": "2026-04-17T08:37:31.398143Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0122", "record": "NCSC-2026-0122", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-04-17T08:37:31.398Z", "date_only": false, "value": "2026-04-17T08:37:31.398143Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0122", "record": "NCSC-2026-0122", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-04-17T08:37:31.398Z", "date_only": false, "value": "2026-04-17T08:37:31.398143Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0122", "record": "NCSC-2026-0122", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-04-17T17:38:20.627Z", "date_only": false, "value": "2026-04-17T17:38:20.627367Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mjphoy5f5n25", "record": "CVE-2026-20184", "field": "creation_timestamp", "uuid": "a6284f75-e61e-49d9-a76a-f6c9c76deab1", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3mjphoy5f5n25"}, {"timestamp": "2026-04-19T02:44:42.810Z", "date_only": false, "value": "2026-04-19T02:44:42.810342Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mjswozj3tk2k", "record": "CVE-2026-20184", "field": "creation_timestamp", "uuid": "c00a9b88-82be-4e8e-8e55-442112b66a4c", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mjswozj3tk2k"}, {"timestamp": "2026-04-19T08:05:35.535Z", "date_only": false, "value": "2026-04-19T08:05:35.535398Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mjtimohclc2k", "record": "CVE-2026-20184", "field": "creation_timestamp", "uuid": "cf0d7ce3-61f7-4901-8d59-0654e8616249", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mjtimohclc2k"}, {"timestamp": "2026-04-20T02:29:48.894Z", "date_only": false, "value": "2026-04-20T02:29:48.894897Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mjvgdclzwg2x", "record": "CVE-2026-20184", "field": "creation_timestamp", "uuid": "cef1cfff-84ee-4b04-beb8-768065feb31c", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mjvgdclzwg2x"}, {"timestamp": "2026-04-20T22:57:20.489Z", "date_only": false, "value": "2026-04-20T22:57:20.489459Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mjxkw3xdrc2s", "record": "CVE-2026-20184", "field": "creation_timestamp", "uuid": "89dd1d7e-f67b-4328-b7d4-94c2e0ce7ecd", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mjxkw3xdrc2s"}, {"timestamp": "2026-07-19T16:00:09.783Z", "date_only": false, "value": "2026-07-19T16:00:09.783835Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/critical_bug/1731", "record": "CVE-2026-20184", "field": "creation_timestamp", "uuid": "028bedf9-da64-4c9a-950e-1e6328456930", "content": "\ud83d\udc31 hacker voice WHO VALIDATED THIS CERT? \ud83d\udd34\n\n\ud83d\udd25 CVE-2026-20184: \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Cisco Webex SSO\n\nCVSS: 9.8 Critical\n\n\u0415\u0441\u043b\u0438 \u0443 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0432\u043a\u043b\u044e\u0447\u0451\u043d Webex \u0447\u0435\u0440\u0435\u0437 SSO \u0441 trust anchors, \u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0433 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f \u043a endpoint \u0441\u0435\u0440\u0432\u0438\u0441\u0430, \u043f\u043e\u0434\u0441\u0443\u043d\u0443\u0442\u044c crafted token \u0438 \u0432\u044b\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u043f\u043e\u0447\u0442\u0438 \u0437\u0430 \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \ud83d\ude2c\n\n\ud83d\udca5 \u0421\u0443\u0442\u044c \u0431\u0430\u0433\u0430:\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0432 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 SSO \u0441 Control Hub. \u041d\u0435 \u043d\u0443\u0436\u0435\u043d \u043d\u0438 \u043b\u043e\u0433\u0438\u043d, \u043d\u0438 \u043a\u043b\u0438\u043a \u043e\u0442 \u0436\u0435\u0440\u0442\u0432\u044b \u2014 \u0435\u0441\u043b\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u0430, \u0431\u0430\u0433 \u0431\u044c\u0451\u0442 \u043f\u0440\u044f\u043c\u043e \u043f\u043e \u0434\u043e\u0432\u0435\u0440\u0438\u044e \u043a \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\ud83d\udea8 \u0427\u0435\u043c \u044d\u0442\u043e \u043e\u043f\u0430\u0441\u043d\u043e?\n\u2014 \u0432\u0445\u043e\u0434 \u0432 Webex \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0430\n\u2014 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0432\u043e\u043d\u043a\u0430\u043c, \u0447\u0430\u0442\u0430\u043c, \u0437\u0430\u043f\u0438\u0441\u044f\u043c \u0438 \u0444\u0430\u0439\u043b\u0430\u043c\n\u2014 \u0443\u0434\u043e\u0431\u043d\u0430\u044f \u0431\u0430\u0437\u0430 \u0434\u043b\u044f \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0439 \u0441\u043e\u0446\u0438\u043d\u0436\u0435\u043d\u0435\u0440\u0438\u0438\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c \u043f\u0440\u044f\u043c\u043e \u0441\u0435\u0439\u0447\u0430\u0441?\n1. \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u043b\u0438 trust anchors \u0432 SSO\n2. \u0417\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u043d\u043e\u0432\u044b\u0439 IdP SAML certificate \u0432 Control Hub\n3. \u041f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u043b\u043e\u0433\u0438 \u0432\u0445\u043e\u0434\u043e\u0432 \u0438 \u0430\u043d\u043e\u043c\u0430\u043b\u044c\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 PDF \u043d\u0438\u0436\u0435 \ud83d\udc47\n\n\ud83d\udc8e \u0411\u043e\u043b\u044c\u0448\u0435 \u044d\u043a\u0441\u043a\u043b\u044e\u0437\u0438\u0432\u043d\u044b\u0445 \u0440\u0430\u0437\u0431\u043e\u0440\u043e\u0432 \u0438 VIP-\u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430: VIP-\u0432\u0435\u0440\u0441\u0438\u044f \u043a\u0430\u043d\u0430\u043b\u0430 \ud83d\ude80\n\n#Cisco #Webex #CVE #SSO #CyberSecurity #Infosec #criticalbug", "url": "https://t.me/critical_bug/1731"}, {"timestamp": "2026-07-19T16:00:09.817Z", "date_only": false, "value": "2026-07-19T16:00:09.817546Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/critical_bug/1732", "record": "CVE-2026-20184", "field": "creation_timestamp", "uuid": "85f359e3-65e8-48a6-a6d1-2e1423cf6678", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 CVE-2026-20184 \u0432 PDF", "url": "https://t.me/critical_bug/1732"}, {"timestamp": "2026-07-20T00:00:07.772Z", "date_only": false, "value": "2026-07-20T00:00:07.772199Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/critical_bug/1732", "record": "CVE-2026-20184", "field": "creation_timestamp", "uuid": "1e45bb13-09eb-431f-b226-623b4423fde0", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 CVE-2026-20184 \u0432 PDF", "url": "https://t.me/critical_bug/1732", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-20T00:00:07.807Z", "date_only": false, "value": "2026-07-20T00:00:07.807813Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/critical_bug/1731", "record": "CVE-2026-20184", "field": "creation_timestamp", "uuid": "9eb57944-4065-46a7-a099-3505fc0575d7", "content": "\ud83d\udc31 hacker voice WHO VALIDATED THIS CERT? \ud83d\udd34\n\n\ud83d\udd25 CVE-2026-20184: \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Cisco Webex SSO\n\nCVSS: 9.8 Critical\n\n\u0415\u0441\u043b\u0438 \u0443 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0432\u043a\u043b\u044e\u0447\u0451\u043d Webex \u0447\u0435\u0440\u0435\u0437 SSO \u0441 trust anchors, \u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0433 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f \u043a endpoint \u0441\u0435\u0440\u0432\u0438\u0441\u0430, \u043f\u043e\u0434\u0441\u0443\u043d\u0443\u0442\u044c crafted token \u0438 \u0432\u044b\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u043f\u043e\u0447\u0442\u0438 \u0437\u0430 \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \ud83d\ude2c\n\n\ud83d\udca5 \u0421\u0443\u0442\u044c \u0431\u0430\u0433\u0430:\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0432 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 SSO \u0441 Control Hub. \u041d\u0435 \u043d\u0443\u0436\u0435\u043d \u043d\u0438 \u043b\u043e\u0433\u0438\u043d, \u043d\u0438 \u043a\u043b\u0438\u043a \u043e\u0442 \u0436\u0435\u0440\u0442\u0432\u044b \u2014 \u0435\u0441\u043b\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u0430, \u0431\u0430\u0433 \u0431\u044c\u0451\u0442 \u043f\u0440\u044f\u043c\u043e \u043f\u043e \u0434\u043e\u0432\u0435\u0440\u0438\u044e \u043a \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\ud83d\udea8 \u0427\u0435\u043c \u044d\u0442\u043e \u043e\u043f\u0430\u0441\u043d\u043e?\n\u2014 \u0432\u0445\u043e\u0434 \u0432 Webex \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0430\n\u2014 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0432\u043e\u043d\u043a\u0430\u043c, \u0447\u0430\u0442\u0430\u043c, \u0437\u0430\u043f\u0438\u0441\u044f\u043c \u0438 \u0444\u0430\u0439\u043b\u0430\u043c\n\u2014 \u0443\u0434\u043e\u0431\u043d\u0430\u044f \u0431\u0430\u0437\u0430 \u0434\u043b\u044f \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0439 \u0441\u043e\u0446\u0438\u043d\u0436\u0435\u043d\u0435\u0440\u0438\u0438\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c \u043f\u0440\u044f\u043c\u043e \u0441\u0435\u0439\u0447\u0430\u0441?\n1. \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u043b\u0438 trust anchors \u0432 SSO\n2. \u0417\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u043d\u043e\u0432\u044b\u0439 IdP SAML certificate \u0432 Control Hub\n3. \u041f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u043b\u043e\u0433\u0438 \u0432\u0445\u043e\u0434\u043e\u0432 \u0438 \u0430\u043d\u043e\u043c\u0430\u043b\u044c\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 PDF \u043d\u0438\u0436\u0435 \ud83d\udc47\n\n\ud83d\udc8e \u0411\u043e\u043b\u044c\u0448\u0435 \u044d\u043a\u0441\u043a\u043b\u044e\u0437\u0438\u0432\u043d\u044b\u0445 \u0440\u0430\u0437\u0431\u043e\u0440\u043e\u0432 \u0438 VIP-\u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430: VIP-\u0432\u0435\u0440\u0441\u0438\u044f \u043a\u0430\u043d\u0430\u043b\u0430 \ud83d\ude80\n\n#Cisco #Webex #CVE #SSO #CyberSecurity #Infosec #criticalbug", "url": "https://t.me/critical_bug/1731", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-18T19:00:05.193Z", "date_only": false, "value": "2026-08-18T19:00:05.193940Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/VulnerabilityNews/41989", "record": "CVE-2026-20184", "field": "creation_timestamp", "uuid": "7d501d27-d7af-4236-90c2-e4763eb23d1e", "content": "Cisco Patches Four Critical Identity Services, Webex Flaws Enabling Code Execution\n\nCisco has announced patches to address four critical security flaws impacting Identity Services and Webex Services that could result in arbitrary code execution and allow an attacker to impersonate any user within the\u00a0service.\nThe details of the vulnerabilities are below\u00a0-\n\nCVE-2026-20184 (CVSS score: 9.8) - An improper certificate validation in the integration of single sign-on (SSO)\nhttps://thehackernews.com/2026/04/cisco-patches-four-critical-identity.html", "url": "https://t.me/VulnerabilityNews/41989"}, {"timestamp": "2026-10-26T22:10:00.163Z", "date_only": false, "value": "2026-10-26T22:10:00.163", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-20184", "record": "FKIE_CVE-2026-20184", "field": "lastModified"}], "metrics": {"as_of": "2026-11-02T02:10:19.391Z", "anchors": {"origin": {"timestamp": "2026-04-15T16:00:00Z", "date_only": false, "value": "2026-04-15T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-WEBEX-CUI-CERT-8JSZYHWL", "record": "CISCO-SA-WEBEX-CUI-CERT-8JSZYHWL", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-04-15T16:00:00Z", "date_only": false, "value": "2026-04-15T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-WEBEX-CUI-CERT-8JSZYHWL", "record": "CISCO-SA-WEBEX-CUI-CERT-8JSZYHWL", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-04-15T19:21:39Z", "date_only": false, "value": "2026-04-15T19:21:39.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/6xMUJRZqtRnDjLonUkq3jsNG6gFtR8te4DLwG6ur_2vlp8I", "record": "CVE-2026-20184", "field": "creation_timestamp", "uuid": "aa18c93f-9598-46bc-abbe-2dc3523953c0", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 12099.0, "hours": 3.3608333333333333, "days": 0.1400347222222222, "min_seconds": 12099.0, "max_seconds": 12099.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-04-15T16:00:00Z", "date_only": false, "value": "2026-04-15T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-WEBEX-CUI-CERT-8JSZYHWL", "record": "CISCO-SA-WEBEX-CUI-CERT-8JSZYHWL", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-04-15T19:21:39Z", "date_only": false, "value": "2026-04-15T19:21:39.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/6xMUJRZqtRnDjLonUkq3jsNG6gFtR8te4DLwG6ur_2vlp8I", "record": "CVE-2026-20184", "field": "creation_timestamp", "uuid": "aa18c93f-9598-46bc-abbe-2dc3523953c0", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 17316619.391399, "hours": 4810.172053166389, "days": 200.42383554859953, "min_seconds": 17316619.391399, "max_seconds": 17316619.391399, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-04-15T16:00:00Z", "date_only": false, "value": "2026-04-15T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-WEBEX-CUI-CERT-8JSZYHWL", "record": "CISCO-SA-WEBEX-CUI-CERT-8JSZYHWL", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-02T02:10:19.391Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 17304520.391399, "hours": 4806.8112198330555, "days": 200.2838008263773, "min_seconds": 17304520.391399, "max_seconds": 17304520.391399, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-04-15T19:21:39Z", "date_only": false, "value": "2026-04-15T19:21:39.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/6xMUJRZqtRnDjLonUkq3jsNG6gFtR8te4DLwG6ur_2vlp8I", "record": "CVE-2026-20184", "field": "creation_timestamp", "uuid": "aa18c93f-9598-46bc-abbe-2dc3523953c0", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-02T02:10:19.391Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}