Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A vulnerability in the text rendering subsystem of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

This vulnerability is due to insufficient validation of input received by an affected device. An attacker could exploit this vulnerability by getting the affected device to render crafted text, for example, a crafted meeting invitation. As indicated in the CVSS score, no user interaction is required, such as accepting the meeting invitation. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.

CVE-2026-20119 is a vulnerability identified in the text rendering subsystem of Cisco RoomOS Software and Cisco TelePresence Collaboration Endpoint (CE) Software. The root cause is insufficient validation of input data processed by the text rendering engine. An attacker can exploit this flaw remotely and without authentication by sending specially crafted text content, for example, a malicious meeting invitation, to the affected device. The vulnerability does not require any user interaction such as accepting or opening the invitation, which significantly lowers the barrier for exploitation. Upon processing the crafted text, the device's software crashes or reloads, causing a denial of service (DoS) condition that disrupts the availability of video conferencing endpoints. The affected versions span a wide range of RoomOS releases from 10.3.x through 11.32.x, indicating a long-standing and broad exposure. The CVSS v3.1 base score of 7.5 reflects a high severity rating, with attack vector network (AV:N), low attack complexity (AC:L), no privileges required (PR:N), no user interaction (UI:N), unchanged scope (S:U), no impact on confidentiality or integrity (C:N/I:N), and high impact on availability (A:H). This vulnerability could impact enterprise collaboration environments by interrupting critical video conferencing services, potentially affecting business continuity and communication. No public exploits have been reported yet, but the ease of exploitation and lack of required authentication make this a significant risk once weaponized. Cisco is expected to release patches to address this issue, and organizations should prioritize updating affected devices.

Detailed information about CVE-2026-20119: Improper Validation of Specified Type of Input in Cisco Cisco RoomOS Software affecting Cisco Cisco RoomOS Software. 

CVE-2026-20119: Improper Validation of Specified Type of Input in Cisco Cisco RoomOS Software - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-20119: Improper Validation of Specified Type of Input in Cisco Cisco RoomOS Software

Threats Tagged 'cve-2026-20119'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-20119'

Lead Pen Test Professional