Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

CVE Database V5

GCVE Database

AlienVault OTX General

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to send traffic that should be denied through an affected device.

This vulnerability is due to improper error handling when an affected device that is joining a cluster runs out of memory while replicating access control rules. An attacker could exploit this vulnerability by sending traffic that should be blocked through the device. A successful exploit could allow the attacker to bypass access controls and reach devices in protected networks.

CVE-2026-20073 is an improper access control vulnerability found in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software. The vulnerability stems from improper error handling when an affected device, while joining a cluster, runs out of memory during the replication of access control rules. This memory exhaustion leads to a failure in enforcing access control policies correctly, allowing an unauthenticated remote attacker to send traffic that should be denied through the firewall. The attacker can exploit this flaw without any authentication or user interaction, effectively bypassing firewall rules and gaining access to devices within protected networks. The vulnerability affects a wide range of Cisco ASA software versions, spanning from 9.12.x through 9.23.x releases, indicating a long-standing issue across multiple product iterations. The CVSS v3.1 base score is 5.8 (medium severity), with the vector indicating network attack vector (AV:N), low attack complexity (AC:L), no privileges required (PR:N), no user interaction (UI:N), and a scope change (S:C) with no confidentiality impact (C:N), limited integrity impact (I:L), and no availability impact (A:N). There are no known exploits in the wild at the time of publication, but the vulnerability presents a significant risk due to the potential for unauthorized traffic passage through critical network security devices. The root cause is related to memory management during cluster synchronization, which can be triggered by resource exhaustion. This flaw could be leveraged in targeted attacks against organizations relying on Cisco ASA and FTD firewalls for perimeter defense and internal segmentation.

Detailed information about CVE-2026-20073: Improper Access Control in Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software affecting Cisco Cis

CVE-2026-20073: Improper Access Control in Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-20073: Improper Access Control in Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software

Threats Tagged 'cve-2026-20073'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-20073'

Lead Pen Test Professional