Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A vulnerability in the sftunnel functionality of Cisco Secure Firewall Management Center (FMC) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, remote attacker with administrative privileges to write arbitrary files as root on the underlying operating system.

This vulnerability is due to insufficient validation of the directory path during file synchronization. An attacker could exploit this vulnerability by crafting a directory path outside of the expected file location. A successful exploit could allow the attacker to create or replace any file on the underlying operating system.

CVE-2026-20018 is a path traversal vulnerability found in the sftunnel functionality of Cisco Secure Firewall Management Center (FMC) and Cisco Secure Firewall Threat Defense (FTD) software. The root cause is insufficient validation of directory paths during file synchronization operations, which allows an attacker with authenticated administrative privileges to craft directory paths containing traversal sequences (e.g., 'dir/../../filename') to escape the intended directory boundaries. This enables the attacker to write arbitrary files anywhere on the underlying operating system with root privileges. The vulnerability affects numerous versions of Cisco FMC and FTD software, spanning from version 7.0.0 through 7.4.3 and likely later versions. Exploitation requires the attacker to have administrative privileges on the system, but does not require user interaction. The CVSS v3.1 base score is 5.9, reflecting medium severity due to the high impact on integrity and availability but requiring high privileges and having high attack complexity. The vulnerability could allow attackers to replace critical system files, potentially leading to system compromise, denial of service, or persistence mechanisms. No public exploits or active exploitation have been reported yet. Cisco has not provided patch links in the provided data, but affected organizations should monitor Cisco advisories for updates. The vulnerability is particularly dangerous in environments where administrative access is not tightly controlled or where FMC/FTD devices are exposed to potentially hostile networks.

Detailed information about CVE-2026-20018: Path Traversal: 'dir/../../filename' in Cisco Cisco Secure Firewall Management Center (FMC) affecting Cisco Cisco Sec

CVE-2026-20018: Path Traversal: 'dir/../../filename' in Cisco Cisco Secure Firewall Management Center (FMC) - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-20018: Path Traversal: 'dir/../../filename' in Cisco Cisco Secure Firewall Management Center (FMC)

Threats Tagged 'cve-2026-20018'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-20018'

Lead Pen Test Professional