Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

CVE Database V5

GCVE Database

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a DoS condition. If OSPF authentication is enabled, the attacker must know the secret key to exploit this vulnerability.
 This vulnerability is due to insufficient input validation when processing OSPF update packets. An attacker could exploit this vulnerability by sending crafted OSPF update packets. A successful exploit could allow the attacker to create a buffer overflow, causing the affected device to reload, resulting in a DoS condition.

CVE-2026-20020 is a vulnerability identified in the Open Shortest Path First (OSPF) protocol implementation within Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firepower Threat Defense (FTD) Software. The root cause is insufficient input validation when processing OSPF update packets, which can be exploited by an unauthenticated attacker located on an adjacent network segment. By sending specially crafted OSPF update packets, the attacker can trigger a buffer overflow condition in the affected device's software. This buffer overflow leads to an unexpected device reload, effectively causing a denial-of-service (DoS) condition that disrupts network traffic and security enforcement. If OSPF authentication is enabled, exploitation requires the attacker to know the OSPF secret key, adding a layer of protection. The vulnerability affects a broad range of ASA software versions spanning from 9.12.1 through 9.23.1.3, indicating that many deployed devices are potentially vulnerable. The CVSS v3.1 score is 6.8 (medium severity), reflecting the attack vector as adjacent network access, low attack complexity, requirement for privileges (likely network adjacency), no user interaction, and impact limited to availability. There is no indication of confidentiality or integrity compromise. No public exploits have been reported yet, but the potential for disruption is significant given the critical role of ASA and FTD devices in network security architectures.

Detailed information about CVE-2026-20020: Improper Input Validation in Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software affecting Cisco C

CVE-2026-20020: Improper Input Validation in Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-20020: Improper Input Validation in Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software

Threats Tagged 'cve-2026-20020'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-20020'

Lead Pen Test Professional