Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A vulnerability in the lockdown mechanism of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, local attacker to perform arbitrary commands as root.

This vulnerability is due to insufficient restrictions on remediation modules while in lockdown mode. An attacker could exploit this vulnerability by sending crafted input to the system CLI of the affected device. A successful exploit could allow the attacker to run arbitrary commands or code as root, even when the system is in lockdown mode. To exploit this vulnerability, the attacker must have valid administrative credentials.

CVE-2026-20044 is a privilege escalation vulnerability found in Cisco Secure Firewall Management Center (FMC) software. The vulnerability stems from improper privilege management within the lockdown mechanism of FMC, specifically due to insufficient restrictions on remediation modules when the system is in lockdown mode. An authenticated attacker with valid administrative credentials can exploit this flaw by sending crafted input to the system command-line interface (CLI), allowing them to execute arbitrary commands or code with root privileges. This effectively bypasses the lockdown protections intended to restrict system modifications during critical security states. The affected versions span a broad range, including all releases from 6.4.0 up to 7.7.10.1, indicating a long-standing issue across multiple major releases. The CVSS v3.1 base score is 6.0, reflecting a medium severity level, with attack vector local, low attack complexity, high privileges required, no user interaction, and high impact on confidentiality and integrity but no impact on availability. No public exploits have been reported yet, but the vulnerability poses a significant risk due to the high level of access it grants. Cisco FMC is widely deployed in enterprise and government networks to manage firewall policies and security events, making this vulnerability critical to address promptly to prevent potential full system compromise by insiders or attackers who have obtained administrative credentials.

Detailed information about CVE-2026-20044: Improper Privilege Management in Cisco Cisco Secure Firewall Management Center (FMC) affecting Cisco Cisco Secure Fir

CVE-2026-20044: Improper Privilege Management in Cisco Cisco Secure Firewall Management Center (FMC) - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-20044: Improper Privilege Management in Cisco Cisco Secure Firewall Management Center (FMC)

Threats Tagged 'cve-2026-20044'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-20044'

Lead Pen Test Professional