Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

CVE Database V5

GCVE Database

AlienVault OTX General

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause BOOTP packets to be forwarded between VLANs, resulting in a denial of service (DoS) condition. 
 This vulnerability is due to improper handling of BOOTP packets on Cisco Catalyst 9000 Series Switches. An attacker could exploit this vulnerability by sending BOOTP request packets to an affected device. A successful exploit could allow an attacker to forward BOOTP packets from one VLAN to another, resulting in BOOTP VLAN leakage and potentially leading to high CPU utilization. This makes the device unreachable (either through console or remote management) and unable to forward traffic, resulting in a DoS condition. 
 Note: This vulnerability can be exploited with either unicast or broadcast BOOTP packets.
   There are workarounds that address this vulnerability.

CVE-2026-20084 is a vulnerability in the DHCP snooping feature of Cisco IOS XE Software, specifically impacting Cisco Catalyst 9000 Series Switches. The flaw arises from improper handling of BOOTP packets, which are used in network booting and DHCP processes. An unauthenticated remote attacker can exploit this by sending crafted BOOTP request packets to the affected device. This causes BOOTP packets to be forwarded across VLAN boundaries, a behavior not intended by design, resulting in VLAN leakage. The unintended forwarding leads to uncontrolled resource consumption, particularly high CPU utilization, which can overwhelm the switch’s processing capabilities. Consequently, the device becomes unreachable via console or remote management interfaces and stops forwarding network traffic, causing a denial of service. The vulnerability can be exploited using either unicast or broadcast BOOTP packets, increasing the attack surface. The affected Cisco IOS XE versions cover a broad spectrum from 16.6.1 up to 17.18.1, indicating a long-standing issue across multiple releases. The CVSS v3.1 base score is 8.6, reflecting high severity due to network attack vector, no required privileges or user interaction, and complete loss of availability. While no public exploits have been reported yet, the potential for disruption in critical network infrastructure is high. Cisco has indicated the existence of workarounds but has not listed specific patch links in the provided data, implying that organizations should monitor Cisco advisories for updates and apply patches promptly once available.

Detailed information about CVE-2026-20084: Uncontrolled Resource Consumption in Cisco Cisco IOS XE Software affecting Cisco Cisco IOS XE Software. Get real-time

CVE-2026-20084: Uncontrolled Resource Consumption in Cisco Cisco IOS XE Software - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-20084: Uncontrolled Resource Consumption in Cisco Cisco IOS XE Software

Threats Tagged 'cve-2026-20084'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-20084'

Lead Pen Test Professional