Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit BlueTeam

Reddit ThreatIntel

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A vulnerability in the Internet Key Exchange version 2 (IKEv2) feature of Cisco IOS Software, Cisco IOS XE Software, Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a memory leak, resulting in a denial of service (DoS) condition on an affected device.
 This vulnerability is due to improper parsing of IKEv2 packets. An attacker could exploit this vulnerability by sending crafted IKEv2 packets to an affected device. A successful exploit of Cisco IOS Software and IOS XE Software could allow the attacker to cause the affected device to reload, resulting in a DoS condition. A successful exploit of Cisco Secure Firewall ASA Software and Secure FTD Software could allow the attacker to partially exhaust system memory, resulting in system instability, such as the inability to establish new IKEv2 VPN sessions. A manual reboot of the device is required to recover from this condition.

CVE-2026-20012 is a vulnerability in the Internet Key Exchange version 2 (IKEv2) implementation within multiple Cisco software products, including Cisco IOS, IOS XE, ASA, and Secure Firewall Threat Defense. The root cause is improper parsing of crafted IKEv2 packets, which leads to a memory leak due to failure to release allocated memory after its effective lifetime. An unauthenticated, remote attacker can exploit this by sending specially crafted IKEv2 packets to the affected device. In Cisco IOS and IOS XE, exploitation can cause the device to reload unexpectedly, resulting in a denial of service (DoS). In Cisco ASA and FTD products, the memory leak can partially exhaust system memory, causing system instability such as the inability to establish new IKEv2 VPN sessions, effectively degrading service availability. Recovery from the DoS condition requires a manual reboot of the device. The vulnerability affects a wide range of Cisco IOS versions, spanning many releases from 15.0 through 15.9, indicating a long-standing issue across multiple product lines. The CVSS v3.1 base score is 8.6 (high), reflecting the network attack vector, no required privileges or user interaction, and a scope change due to potential device reloads. While no known exploits have been reported in the wild, the vulnerability’s characteristics make it a significant threat to network infrastructure relying on Cisco VPN and firewall devices. The vulnerability does not impact confidentiality or integrity directly but severely impacts availability and operational continuity. Cisco has not yet published patches or mitigation details at the time of this report.

Detailed information about CVE-2026-20012: Missing Release of Memory after Effective Lifetime in Cisco IOS affecting Cisco IOS. Get real-time updates, technical

CVE-2026-20012: Missing Release of Memory after Effective Lifetime in Cisco IOS - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-20012: Missing Release of Memory after Effective Lifetime in Cisco IOS

Threats Tagged 'cve-2026-20012'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-20012'

Lead Pen Test Professional