Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit BlueTeam

Reddit ThreatIntel

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with read-only privileges to perform command injection attacks on an affected system and execute arbitrary commands as the root user.

This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted commands to the web-based management interface of the affected software. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system as the root user.

This vulnerability arises from improper neutralization of special elements in user-supplied input within the Cisco IMC web interface, allowing command injection. An attacker with read-only authenticated access can send crafted commands to the interface, resulting in execution of arbitrary commands with root privileges on the underlying operating system. The affected product is Cisco Unified Computing System (Standalone), with many versions impacted. The CVSS 3.1 vector indicates network attack vector, low attack complexity, required privileges of low (authenticated read-only), no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability.

Detailed information about CVE-2026-20094: Improper Neutralization of Special Elements used in a Command ('Command Injection') in Cisco Cisco Unified Computing 

CVE-2026-20094: Improper Neutralization of Special Elements used in a Command ('Command Injection') in Cisco Cisco Unified Computing System (Standalone) - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-20094: Improper Neutralization of Special Elements used in a Command ('Command Injection') in Cisco Cisco Unified Computing System (Standalone)

Threats Tagged 'cve-2026-20094'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-20094'

Lead Pen Test Professional