Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, remote attacker with valid VPN user credentials to cause a DoS condition on an affected device that may also impact the availability of services to devices elsewhere in the network.
 This vulnerability is due to the improper processing of IKEv2 packets. An attacker could exploit this vulnerability by sending crafted, authenticated IKEv2 packets to an affected device. A successful exploit could allow the attacker to exhaust memory, causing the device to reload.

CVE-2026-20014 is a vulnerability found in the Internet Key Exchange version 2 (IKEv2) implementation within Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firepower Threat Defense (FTD) Software. The flaw arises from improper handling of IKEv2 packets, specifically a missing release of memory after its effective lifetime. An authenticated attacker possessing valid VPN credentials can send specially crafted IKEv2 packets to the affected device, causing it to exhaust its memory resources. This memory exhaustion leads to a denial-of-service (DoS) condition, forcing the device to reload and disrupting firewall and VPN services. The vulnerability spans a wide range of Cisco ASA software versions, from 9.18.1 up to 9.23.1.13, indicating a long-standing issue across multiple releases. The CVSS v3.1 base score is 7.7 (high severity), reflecting network attack vector, low attack complexity, required privileges (valid VPN user), no user interaction, and a scope change due to impact on other network devices. While no public exploits have been reported, the vulnerability's nature and affected product's critical role in network security make it a significant risk. The improper memory release suggests a resource management flaw that could be targeted for repeated exploitation, leading to persistent service interruptions. Cisco has not listed patch links in the provided data, but affected organizations should monitor Cisco advisories for updates. The vulnerability primarily threatens the availability of firewall and VPN services, potentially affecting broader network availability due to firewall reloads.

Detailed information about CVE-2026-20014: Missing Release of Memory after Effective Lifetime in Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) S

CVE-2026-20014: Missing Release of Memory after Effective Lifetime in Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-20014: Missing Release of Memory after Effective Lifetime in Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software

Threats Tagged 'cve-2026-20014'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-20014'

Lead Pen Test Professional