Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities.

The vulnerabilities tracked by CVE-2026-20276 are related to insufficient control flow management issues that are grouped under the Common Weakness Enumeration (CWE) CWE-691.

Cisco IOS XR Software contains multiple internally discovered vulnerabilities related to insufficient control flow management (CWE-691), tracked under CVE-2026-20276. These vulnerabilities were identified through Cisco's internal security review process and have been addressed in software hardening releases. The CVSS 3.1 score of 8.6 reflects a high-severity issue with network attack vector and impact on availability. Affected versions include a broad range of specific releases across multiple major versions of Cisco IOS XR Software. No public exploit code or active exploitation has been reported.

Detailed information about CVE-2026-20276: Insufficient Control Flow Management in Cisco Cisco IOS XR Software affecting Cisco Cisco IOS XR Software. Get real-t

CVE-2026-20276: Insufficient Control Flow Management in Cisco Cisco IOS XR Software - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-20276: Insufficient Control Flow Management in Cisco Cisco IOS XR Software

CVE-2026-20212 is a critical vulnerability in Cisco NX-OS Software affecting the Silicon One integration for Cisco Nexus 9000 Series Switches. It allows an unauthenticated remote attacker to execute code with root privileges by connecting to TCP ports 43210 and 43211, which are accessible by default in the Layer 3 VRF. Exploitation can also cause the S1HAL process to crash, potentially leading to device reloads.

This vulnerability arises because TCP ports 43210 and 43211 are exposed in the default Layer 3 VRF on affected Cisco Nexus 9000 Series Switches running NX-OS Software. An unauthenticated remote attacker can connect to these ports and send crafted input that executes arbitrary code with root privileges. Additionally, exploitation may crash the S1HAL process, causing the device to reload. The vulnerability is identified as CVE-2026-20212 with a CVSS 3.1 base score of 9.8, indicating critical severity. It affects multiple versions of Cisco NX-OS Software, specifically numerous 10.3.x, 10.4.x, 10.5.x, and 10.6.x releases as enumerated in the affectedVersions field. No known exploits in the wild have been reported. The vulnerability is linked to CWEs 1327 and 354, related to binding to unrestricted IP addresses and improper access control.

Detailed information about Kwetsbaarheden verholpen in Cisco Nexus 9000 Series, IOS XR Software en Secure Email affecting Nationaal Cyber Security Centrum Cisco

Kwetsbaarheden verholpen in Cisco Nexus 9000 Series, IOS XR Software en Secure Email - Live Threat Intelligence - Threat Radar | OffSeq.com

Reference

CVE-2026-20212: Binding to an Unrestricted IP Address in Cisco Cisco NX-OS Software


CVE-2026-20276: Insufficient Control Flow Management in Cisco Cisco IOS XR SoftwareCVE-2026-20276 0 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20276 are related to insufficient control flow management issues that are grouped under the Common Weakness Enumeration (CWE) CWE-691. HighVulnerability#cve #cve-2026-20276 Join the discussion	CVE Database V5	09/02/2026, 16:13:28 UTC Added: 09/02/2026, 16:37:48 UTC
CVE-2026-20212: Binding to an Unrestricted IP Address in Cisco Cisco NX-OS SoftwareCVE-2026-20212 0 CVE-2026-20212 is a critical vulnerability in Cisco NX-OS Software affecting the Silicon One integration for Cisco Nexus 9000 Series Switches. It allows an unauthenticated remote attacker to execute code with root privileges by connecting to TCP ports 43210 and 43211, which are accessible by default in the Layer 3 VRF. Exploitation can also cause the S1HAL process to crash, potentially leading to device reloads. CriticalVulnerability#gcve #csaf #cve-2026-20212 Join the discussion	GCVE Database	09/02/2026, 16:13:08 UTC Added: 09/03/2026, 15:16:38 UTC

Threats Tagged 'cve-2026-20276'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-20276'

Lead Pen Test Professional