{"metadata": {"vulnerability": "cve-2026-20122", "count": 100, "kinds": {"milestone": 8, "sighting": 46, "kev": 11, "other": 35}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0071", "record": "NCSC-2026-0071", "field": "document.tracking.generator.date"}, {"timestamp": "2025-10-08T11:59:15.377Z", "date_only": false, "value": "2025-10-08T11:59:15.377Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-20122", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-02-25T00:00:00Z", "date_only": false, "value": "2026-02-25T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0210", "record": "CERTFR-2026-AVI-0210", "field": "last_revision_date"}, {"timestamp": "2026-02-25T00:00:00Z", "date_only": true, "value": "2026-02-25", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0210", "record": "CERTFR-2026-AVI-0210", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-02-25T00:00:00Z", "date_only": false, "value": "2026-02-25T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0210", "record": "CERTFR-2026-AVI-0210", "field": "revisions.0.revision_date"}, {"timestamp": "2026-02-25T15:59:38Z", "date_only": false, "value": "2026-02-25T15:59:38+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-SDWAN-AUTHBP-QWCX8D4V", "record": "CISCO-SA-SDWAN-AUTHBP-QWCX8D4V", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-02-25T16:00:00Z", "date_only": false, "value": "2026-02-25T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-SDWAN-AUTHBP-QWCX8D4V", "record": "CISCO-SA-SDWAN-AUTHBP-QWCX8D4V", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-02-25T16:14:21.256Z", "date_only": false, "value": "2026-02-25T16:14:21.256Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-20122", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-02-25T16:34:22Z", "date_only": false, "value": "2026-02-25T16:34:22.000000Z", "kind": "sighting", "label": "Seen", "source": "https://vulnerability.circl.lu/bundle/b24f0b20-207c-4881-af91-eb1d15b224ba", "record": "CVE-2026-20122", "field": "creation_timestamp", "uuid": "cfd74578-00a0-4196-b53a-59cd64de7168", "url": "https://vulnerability.circl.lu/bundle/b24f0b20-207c-4881-af91-eb1d15b224ba"}, {"timestamp": "2026-02-25T17:00:08.369Z", "date_only": false, "value": "2026-02-25T17:00:08.369853Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mfp5rtagrx26", "record": "CVE-2026-20122", "field": "creation_timestamp", "uuid": "7c5ba8fd-5d86-4570-a6f5-af3bf30c2f4e", "url": "https://bsky.app/profile/o2cloud.bsky.social/post/3mfp5rtagrx26"}, {"timestamp": "2026-02-25T17:11:09.013Z", "date_only": false, "value": "2026-02-25T17:11:09.013125Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0071", "record": "NCSC-2026-0071", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-02-25T17:11:09.013Z", "date_only": false, "value": "2026-02-25T17:11:09.013125Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0071", "record": "NCSC-2026-0071", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-02-25T17:25:28Z", "date_only": false, "value": "2026-02-25T17:25:28Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-9QPV-49Q8-9CHX", "record": "GHSA-9QPV-49Q8-9CHX", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-02-25T17:25:28.170Z", "date_only": false, "value": "2026-02-25T17:25:28.170000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202602-3961", "record": "VAR-202602-3961", "field": "sources_release_date.data.1.date"}, {"timestamp": "2026-02-25T17:25:28.170Z", "date_only": false, "value": "2026-02-25T17:25:28.170", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-20122", "record": "FKIE_CVE-2026-20122", "field": "published"}, {"timestamp": "2026-02-25T17:29:05Z", "date_only": false, "value": "2026-02-25T17:29:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/rilevato-sfruttamento-di-vulnerabilita-in-prodotti-cisco", "record": "CVE-2026-20122", "field": "creation_timestamp", "uuid": "a7a21a87-c6d7-4d93-9a1d-a9cfa893567f", "url": "https://www.acn.gov.it/portale/w/rilevato-sfruttamento-di-vulnerabilita-in-prodotti-cisco"}, {"timestamp": "2026-02-25T18:31:38Z", "date_only": false, "value": "2026-02-25T18:31:38Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-9QPV-49Q8-9CHX", "record": "GHSA-9QPV-49Q8-9CHX", "field": "published"}, {"timestamp": "2026-02-25T18:43:06Z", "date_only": false, "value": "2026-02-25T18:43:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/kriittisia-haavoittuvuuksia-cisco-catalyst-sd-wan-tuotteissa", "record": "CVE-2026-20122", "field": "creation_timestamp", "uuid": "581065aa-871b-46b6-adf9-fa91db2706ca", "url": "https://www.kyberturvallisuuskeskus.fi/fi/kriittisia-haavoittuvuuksia-cisco-catalyst-sd-wan-tuotteissa"}, {"timestamp": "2026-02-25T19:26:43Z", "date_only": false, "value": "2026-02-25T19:26:43.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cert.si/si-cert-2026-01/", "record": "CVE-2026-20122", "field": "creation_timestamp", "uuid": "1a5b7bcd-3d4b-4e9d-85b9-ab2f2634a973", "url": "https://www.cert.si/si-cert-2026-01/"}, {"timestamp": "2026-02-25T20:03:01Z", "date_only": false, "value": "2026-02-25T20:03:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/cisco-security-advisory-av26-166", "record": "CVE-2026-20122", "field": "creation_timestamp", "uuid": "9d703255-c9c9-467f-ab28-c35e31834e60", "url": "https://cyber.gc.ca/en/alerts-advisories/cisco-security-advisory-av26-166"}, {"timestamp": "2026-02-25T23:00:00Z", "date_only": false, "value": "2026-02-25T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0516", "record": "WID-SEC-W-2026-0516", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-02-25T23:00:00Z", "date_only": false, "value": "2026-02-25T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0516", "record": "WID-SEC-W-2026-0516", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-02-25T23:00:00Z", "date_only": false, "value": "2026-02-25T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0516", "record": "WID-SEC-W-2026-0516", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-02-26T07:45:00Z", "date_only": false, "value": "2026-02-26T07:45:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cert.se/2026/02/kritisk-nolldagssarbarhet-i-cisco-catalyst-sd-wan.html", "record": "CVE-2026-20122", "field": "creation_timestamp", "uuid": "96ae4485-72e8-431b-9941-ba0956621143", "url": "https://www.cert.se/2026/02/kritisk-nolldagssarbarhet-i-cisco-catalyst-sd-wan.html"}, {"timestamp": "2026-02-26T11:58:53Z", "date_only": false, "value": "2026-02-26T11:58:53.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cert.at/de/warnungen/2026/2/kritische-sicherheitslucken-in-cisco-catalyst-sd-wan-aktiv-ausgenutzt-updates-verfugbar", "record": "CVE-2026-20122", "field": "creation_timestamp", "uuid": "258bc18a-5a1f-433b-a4bf-de86e52bd1a5", "url": "https://www.cert.at/de/warnungen/2026/2/kritische-sicherheitslucken-in-cisco-catalyst-sd-wan-aktiv-ausgenutzt-updates-verfugbar"}, {"timestamp": "2026-03-04T21:25:22.193Z", "date_only": false, "value": "2026-03-04T21:25:22.193000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202602-3961", "record": "VAR-202602-3961", "field": "sources_update_date.data.1.date"}, {"timestamp": "2026-03-04T23:00:00Z", "date_only": false, "value": "2026-03-04T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0516", "record": "WID-SEC-W-2026-0516", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-03-05T00:00:00Z", "date_only": false, "value": "2026-03-05T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-20122", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-03-05T00:00:00Z", "date_only": false, "value": "2026-03-05T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-20122", "record": "FKIE_CVE-2026-20122", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-03-05T00:06:17Z", "date_only": false, "value": "2026-03-05T00:06:17+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-SDWAN-AUTHBP-QWCX8D4V", "record": "CISCO-SA-SDWAN-AUTHBP-QWCX8D4V", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-03-05T10:40:06Z", "date_only": false, "value": "2026-03-05T10:40:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/alon710/ea2f297d04de8823aedd27e12502bd5b", "record": "CVE-2026-20122", "field": "creation_timestamp", "uuid": "108969f7-6144-4fcb-af81-e15d6e16adcf", "url": "https://gist.github.com/alon710/ea2f297d04de8823aedd27e12502bd5b"}, {"timestamp": "2026-03-05T11:06:47Z", "date_only": false, "value": "2026-03-05T11:06:47.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2026/03/05/cisco-flags-more-sdwan-flaws.html", "record": "CVE-2026-20122", "field": "creation_timestamp", "uuid": "cd7bced2-398a-4cc8-a5c1-1a8b5a6322b9", "url": "https://threatintel.cc/2026/03/05/cisco-flags-more-sdwan-flaws.html"}, {"timestamp": "2026-03-05T12:06:41.408Z", "date_only": false, "value": "2026-03-05T12:06:41.408139Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/116176479912988309", "record": "CVE-2026-20122", "field": "creation_timestamp", "uuid": "d5f2d330-2239-4596-823c-ef8bf03fe60e", "url": "https://infosec.exchange/users/edwardk/statuses/116176479912988309"}, {"timestamp": "2026-03-05T12:07:17.611Z", "date_only": false, "value": "2026-03-05T12:07:17.611365Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mgcr5jawyk2x", "record": "CVE-2026-20122", "field": "creation_timestamp", "uuid": "c4a5e899-e265-4eb3-944c-36cf96faead6", "url": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mgcr5jawyk2x"}, {"timestamp": "2026-03-05T14:22:00Z", "date_only": false, "value": "2026-03-05T14:22:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2026/03/cisco-confirms-active-exploitation-of.html", "record": "CVE-2026-20122", "field": "creation_timestamp", "uuid": "1890635e-111d-486f-9bb2-8cd62223daf2", "url": "https://thehackernews.com/2026/03/cisco-confirms-active-exploitation-of.html"}, {"timestamp": "2026-03-05T15:23:45Z", "date_only": false, "value": "2026-03-05T15:23:45.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/8543", "record": "CVE-2026-20122", "field": "creation_timestamp", "uuid": "d8005c7f-8d53-4ff8-bd7b-bd3fbbdf486b", "content": "\u26a0\ufe0f Cisco confirms active exploitation of two Catalyst SD-WAN Manager flaws.\n\n\u25b6 CVE-2026-20122 enables arbitrary file overwrite via API credentials.\n\u25b6CVE-2026-20128 can expose data and grant DCA privileges after login.\n\n\ud83d\udd17 Read \u2192 https://thehackernews.com/2026/03/cisco-confirms-active-exploitation-of.html\n\nPatches are out across multiple releases.", "url": "https://t.me/thehackernews/8543"}, {"timestamp": "2026-03-05T16:02:12.912Z", "date_only": false, "value": "2026-03-05T16:02:12.912469Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mgd6bnngwt2p", "record": "cve-2026-20122", "field": "creation_timestamp", "uuid": "3735d6d4-b8bd-4062-8682-1f16f1cb3d95", "url": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mgd6bnngwt2p"}, {"timestamp": "2026-03-05T16:31:14.782Z", "date_only": false, "value": "2026-03-05T16:31:14.782901Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/solidot.bsky.social/post/3mgd7vksqzs2o", "record": "CVE-2026-20122", "field": "creation_timestamp", "uuid": "89be8fa8-dc05-4a53-9d31-e23acef04d3a", "url": "https://bsky.app/profile/solidot.bsky.social/post/3mgd7vksqzs2o"}, {"timestamp": "2026-03-05T17:00:08Z", "date_only": false, "value": "2026-03-05T17:00:08.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/7969", "record": "CVE-2026-20122", "field": "creation_timestamp", "uuid": "02ad3b53-f7db-44e9-9140-eda040245746", "content": "Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043d\u0430\u0447\u0430\u043b\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u0432\u043e\u043b\u043d\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0434\u0432\u0443\u0445 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Catalyst SD-WAN \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n25 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f\u00a0\u043f\u044f\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Catalyst SD-WAN, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root.\u00a0\n\n\u041f\u043e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044e \u043d\u0430 5 \u043c\u0430\u0440\u0442\u0430 Cisco \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u0441\u0432\u043e\u0435 \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0435 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u0432 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0435\u0439 \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0434\u0432\u0443\u0445 \u0438\u0437 \u043f\u044f\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439: CVE-2026-20128 \u0438 CVE-2026-20122.\n\n\u041f\u0435\u0440\u0432\u0430\u044f, CVE-2026-20128, - \u044d\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0430\u0433\u0435\u043d\u0442\u0430 \u0441\u0431\u043e\u0440\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 (DCA) \u0432 Catalyst SD-WAN Manager. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f DCA \u0432 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u0414\u0440\u0443\u0433\u0430\u044f, CVE-2026-20122, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u044d\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e API Catalyst SD-WAN Manager. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n\u0412 Cisco \u043f\u043e\u043a\u0430 \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u043e \u0432 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0438 \u0443\u043a\u0430\u0437\u0430\u043d\u043e, \u0447\u0442\u043e \u043e\u043d\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438.\n\n\u041d\u043e \u0441\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0441\u0442\u0430\u0442\u0443\u0441\u0430 \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u043e \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0434\u0435\u043b\u044e \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439\u00a00-day, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 Catalyst SD-WAN.\n\nCVE-2026-20127 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\u0422\u043e\u0433\u0434\u0430 CISA \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0430, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u044f\u043b\u0430\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0441 \u0431\u043e\u043b\u0435\u0435 \u0441\u0442\u0430\u0440\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e Catalyst, CVE-2022-20775, \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u0432 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nCisco Talos \u0441\u0432\u044f\u0437\u0430\u043b\u0430 \u044d\u0442\u0438 \u0430\u0442\u0430\u043a\u0438 \u0441 UAT-8616, \u043f\u0440\u043e\u0434\u0432\u0438\u043d\u0443\u0442\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u043c \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0441 2023 \u0433\u043e\u0434\u0430.\u00a0\u041d\u043e \u043d\u0435\u044f\u0441\u043d\u043e, \u0431\u044b\u043b\u0438 \u043b\u0438 \u0432\u0441\u0435 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Catalyst SD-WAN \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0432 \u043e\u0434\u043d\u043e\u0439 \u0438\u043b\u0438 \u0440\u0430\u0437\u043d\u044b\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u0445.\u00a0\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Cisco \u0442\u0430\u043a\u0436\u0435 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u043b\u0430 \u0430\u0442\u0430\u043a\u0438 \u0441 \u043d\u0443\u043b\u044f\u043c\u0438,\u00a0\u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043c\u044b\u043c\u0438 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0439 APT, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u043a\u0430\u043a UAT-9686. \u0412 \u043e\u0431\u0449\u0435\u043c, \u0431\u0443\u0434\u0435\u043c \u0441\u043b\u0435\u0434\u0438\u0442\u044c.", "url": "https://t.me/true_secator/7969"}, {"timestamp": "2026-03-05T18:17:57.098Z", "date_only": false, "value": "2026-03-05T18:17:57.098340Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/firstpasslab.bsky.social/post/3mgdfudtaec2t", "record": "CVE-2026-20122", "field": "creation_timestamp", "uuid": "c31c6702-0461-4ee8-ba16-7ff6410ad10d", "url": "https://bsky.app/profile/firstpasslab.bsky.social/post/3mgdfudtaec2t"}, {"timestamp": "2026-03-05T20:45:14Z", "date_only": false, "value": "2026-03-05T20:45:14.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cKure/16043", "record": "CVE-2026-20122", "field": "creation_timestamp", "uuid": "d84a2349-c19b-4104-9030-41601346e375", "content": "\u25a0\u25a0\u25a1\u25a1\u25a1 \u26a0\ufe0f Cisco confirms active exploitation of two Catalyst SD-WAN Manager flaws.\n\n\u25b6 CVE-2026-20122 enables arbitrary file overwrite via API credentials.\n\u25b6CVE-2026-20128 can expose data and grant DCA privileges after login.\n https://thehackernews.com/2026/03/cisco-confirms-active-exploitation-of.html", "url": "https://t.me/cKure/16043"}, {"timestamp": "2026-03-05T23:00:00Z", "date_only": false, "value": "2026-03-05T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0516", "record": "WID-SEC-W-2026-0516", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-03-06T00:00:00Z", "date_only": false, "value": "2026-03-06T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202602-3961", "record": "VAR-202602-3961", "field": "sources_release_date.data.0.date"}, {"timestamp": "2026-03-06T06:39:00Z", "date_only": false, "value": "2026-03-06T06:39:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202602-3961", "record": "VAR-202602-3961", "field": "sources_update_date.data.0.date"}, {"timestamp": "2026-03-06T06:43:54.098Z", "date_only": false, "value": "2026-03-06T06:43:54.098954Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mgepk4y3yk2h", "record": "CVE-2026-20122", "field": "creation_timestamp", "uuid": "7d0c895e-569b-411b-a56e-32e2a2b77b75", "url": "https://bsky.app/profile/shiojiri.com/post/3mgepk4y3yk2h"}, {"timestamp": "2026-03-06T07:02:45.771Z", "date_only": false, "value": "2026-03-06T07:02:45.771570Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cloud-native.activitypub.awakari.com.ap.brid.gy/post/3mgeqkzerw552", "record": "CVE-2026-20122", "field": "creation_timestamp", "uuid": "acea0afb-a562-4488-9b64-81f9a8b03611", "url": "https://bsky.app/profile/cloud-native.activitypub.awakari.com.ap.brid.gy/post/3mgeqkzerw552"}, {"timestamp": "2026-03-06T07:24:19.834Z", "date_only": false, "value": "2026-03-06T07:24:19.834138Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0071", "record": "NCSC-2026-0071", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-03-06T11:07:02Z", "date_only": false, "value": "2026-03-06T11:07:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0071", "record": "CVE-2026-20122", "field": "creation_timestamp", "uuid": "b6996ef4-ab4d-4746-8152-aff8f9fbf7ce", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0071"}, {"timestamp": "2026-03-06T12:07:02.595Z", "date_only": false, "value": "2026-03-06T12:07:02.595940Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0071", "record": "NCSC-2026-0071", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-03-06T12:07:02.595Z", "date_only": false, "value": "2026-03-06T12:07:02.595940Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0071", "record": "NCSC-2026-0071", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-03-06T12:30:03.514Z", "date_only": false, "value": "2026-03-06T12:30:03.514800Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mgfcv6epdc23", "record": "CVE-2026-20122", "field": "creation_timestamp", "uuid": "0eee611f-806a-4387-a754-96f0237933f6", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mgfcv6epdc23"}, {"timestamp": "2026-03-06T14:25:27.962Z", "date_only": false, "value": "2026-03-06T14:25:27.962008Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hack4career.com/post/3mgfjdl24bc25", "record": "CVE-2026-20122", "field": "creation_timestamp", "uuid": "d25150ee-df7b-4e6f-9c0d-766765db12d2", "url": "https://bsky.app/profile/hack4career.com/post/3mgfjdl24bc25"}, {"timestamp": "2026-03-06T15:20:00Z", "date_only": false, "value": "2026-03-06T15:20:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.ncsc.nl/alerts/actief-misbruik-van-kwetsbaarheden-in-cisco-producten", "record": "CVE-2026-20122", "field": "creation_timestamp", "uuid": "f01a7f8e-23dd-454c-b8c4-69b362bb053a", "url": "https://www.ncsc.nl/alerts/actief-misbruik-van-kwetsbaarheden-in-cisco-producten"}, {"timestamp": "2026-03-06T17:20:05.072Z", "date_only": false, "value": "2026-03-06T17:20:05.072353Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mgft3sath72m", "record": "CVE-2026-20122", "field": "creation_timestamp", "uuid": "80b58b90-971a-4dc8-aa7c-bba53c7894fa", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3mgft3sath72m"}, {"timestamp": "2026-03-06T18:05:42.888Z", "date_only": false, "value": "2026-03-06T18:05:42.888312Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sctocs.bsky.social/post/3mgfvn535zs2t", "record": "CVE-2026-20122", "field": "creation_timestamp", "uuid": "c878a8b1-df75-4850-87cf-9f60a6a6f72f", "url": "https://bsky.app/profile/sctocs.bsky.social/post/3mgfvn535zs2t"}, {"timestamp": "2026-03-06T21:02:59.812Z", "date_only": false, "value": "2026-03-06T21:02:59.812803Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mgg7kcqicj2h", "record": "CVE-2026-20122", "field": "creation_timestamp", "uuid": "1b61fd5a-b14e-4052-88b3-dd83b2487bd6", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mgg7kcqicj2h"}, {"timestamp": "2026-03-07T06:08:07.923Z", "date_only": false, "value": "2026-03-07T06:08:07.923608Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/rankednews.bsky.social/post/3mgh5z6lbpj2g", "record": "CVE-2026-20122", "field": "creation_timestamp", "uuid": "8fc61ce9-a622-449a-b6be-a250d2b793fc", "url": "https://bsky.app/profile/rankednews.bsky.social/post/3mgh5z6lbpj2g"}, {"timestamp": "2026-03-07T19:18:31.651Z", "date_only": false, "value": "2026-03-07T19:18:31.651650Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mgik6iv3ac23", "record": "CVE-2026-20122", "field": "creation_timestamp", "uuid": "79c30084-0272-46be-b52f-0e114c840fc9", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mgik6iv3ac23"}, {"timestamp": "2026-03-09T00:00:00Z", "date_only": false, "value": "2026-03-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-010/", "record": "CVE-2026-20122", "field": "creation_timestamp", "uuid": "9b257bc3-d1be-4a7d-b43b-ce1e399b1ea7", "url": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-010/"}, {"timestamp": "2026-03-09T23:40:28.074Z", "date_only": false, "value": "2026-03-09T23:40:28.074000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202602-3961", "record": "VAR-202602-3961", "field": "last_update_date"}, {"timestamp": "2026-03-18T01:06:38Z", "date_only": false, "value": "2026-03-18T01:06:38+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-SDWAN-AUTHBP-QWCX8D4V", "record": "CISCO-SA-SDWAN-AUTHBP-QWCX8D4V", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-03-18T15:19:49.349Z", "date_only": false, "value": "2026-03-18T15:19:49.349919Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/AAKL/statuses/116250849364616830", "record": "CVE-2026-20122", "field": "creation_timestamp", "uuid": "a022eb9f-8516-4c07-b56b-a89cc11b9a21", "url": "https://infosec.exchange/users/AAKL/statuses/116250849364616830"}, {"timestamp": "2026-03-20T21:47:05.503Z", "date_only": false, "value": "2026-03-20T21:47:05.503Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / cisco", "record": "cve-2026-20122", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-20T00:00:00Z", "date_only": false, "value": "2026-04-20T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2026-20122", "field": "timestamps.asserted_at", "uuid": "c289615a-7fd9-4e6a-b760-88e0035a97f7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-20T00:00:00Z", "date_only": true, "value": "2026-04-20", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-20122", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2026-04-20T00:00:00Z", "date_only": true, "value": "2026-04-20", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2026-20122", "field": "evidence.0.details.date_added", "uuid": "c289615a-7fd9-4e6a-b760-88e0035a97f7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-20T00:00:00Z", "date_only": false, "value": "2026-04-20T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2026-20122", "field": "timestamps.first_seen_at", "uuid": "c289615a-7fd9-4e6a-b760-88e0035a97f7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-20T00:00:00Z", "date_only": false, "value": "2026-04-20T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2026-20122", "field": "status.status_updated_at", "uuid": "c289615a-7fd9-4e6a-b760-88e0035a97f7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-20T00:00:00Z", "date_only": false, "value": "2026-04-20T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-20122", "field": "containers.adp.0.timeline.0.time"}, {"timestamp": "2026-04-20T20:00:02Z", "date_only": false, "value": "2026-04-20T20:00:02+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2026-20122", "field": "timestamps.recorded_at", "uuid": "c289615a-7fd9-4e6a-b760-88e0035a97f7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-20T20:00:03.016Z", "date_only": false, "value": "2026-04-20T20:00:03.016165Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/c289615a-7fd9-4e6a-b760-88e0035a97f7", "record": "CVE-2026-20122", "field": "creation_timestamp", "uuid": "41bcd383-bf34-4d05-a6b2-e2196e2e9e38", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/c289615a-7fd9-4e6a-b760-88e0035a97f7"}, {"timestamp": "2026-04-20T20:00:03.021Z", "date_only": false, "value": "2026-04-20T20:00:03.021667Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e1228312-271a-42cb-9474-847cdc1a1e8e", "record": "CVE-2026-20122", "field": "creation_timestamp", "uuid": "a9416e73-cdd9-4715-9bbe-351c312a7870", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e1228312-271a-42cb-9474-847cdc1a1e8e"}, {"timestamp": "2026-04-20T21:31:38Z", "date_only": false, "value": "2026-04-20T21:31:38Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-9QPV-49Q8-9CHX", "record": "GHSA-9QPV-49Q8-9CHX", "field": "modified"}, {"timestamp": "2026-04-20T22:00:00Z", "date_only": false, "value": "2026-04-20T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0516", "record": "WID-SEC-W-2026-0516", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-04-20T22:00:00Z", "date_only": false, "value": "2026-04-20T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0516", "record": "WID-SEC-W-2026-0516", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-04-21T03:55:33.255Z", "date_only": false, "value": "2026-04-21T03:55:33.255Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-20122", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-04-21T03:55:33.255Z", "date_only": false, "value": "2026-04-21T03:55:33.255Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-20122", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-21T04:02:04.244Z", "date_only": false, "value": "2026-04-21T04:02:04.244374Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mjy3x67srm2n", "record": "CVE-2026-20122", "field": "creation_timestamp", "uuid": "0204c685-e23c-48c7-b674-6813e4cadf8d", "url": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mjy3x67srm2n"}, {"timestamp": "2026-04-21T06:56:53Z", "date_only": false, "value": "2026-04-21T06:56:53.000000Z", "kind": "sighting", "label": "Seen", "source": "https://ccb.belgium.be/advisories/warning-multiple-critical-vulnerabilities-several-cisco-products-including-cisco-secure", "record": "CVE-2026-20122", "field": "creation_timestamp", "uuid": "a5d29e0e-e13b-4485-a9d4-8143657cd31f", "url": "https://ccb.belgium.be/advisories/warning-multiple-critical-vulnerabilities-several-cisco-products-including-cisco-secure"}, {"timestamp": "2026-04-21T08:09:54.503Z", "date_only": false, "value": "2026-04-21T08:09:54.503+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0516", "record": "WID-SEC-W-2026-0516", "field": "document.tracking.generator.date"}, {"timestamp": "2026-04-22T15:10:56Z", "date_only": false, "value": "2026-04-22T15:10:56+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-SDWAN-AUTHBP-QWCX8D4V", "record": "CISCO-SA-SDWAN-AUTHBP-QWCX8D4V", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-04-22T15:10:56Z", "date_only": false, "value": "2026-04-22T15:10:56+00:00", "kind": "other", "label": "Updated", "source": "csaf_cisco \u00b7 CISCO-SA-SDWAN-AUTHBP-QWCX8D4V", "record": "CISCO-SA-SDWAN-AUTHBP-QWCX8D4V", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-04-22T15:11:01Z", "date_only": false, "value": "2026-04-22T15:11:01+00:00", "kind": "other", "label": "Document generated", "source": "csaf_cisco \u00b7 CISCO-SA-SDWAN-AUTHBP-QWCX8D4V", "record": "CISCO-SA-SDWAN-AUTHBP-QWCX8D4V", "field": "document.tracking.generator.date"}, {"timestamp": "2026-04-22T18:03:54.189Z", "date_only": false, "value": "2026-04-22T18:03:54.189185Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/AAKL/statuses/116449675412278045", "record": "CVE-2026-20122", "field": "creation_timestamp", "uuid": "c2e5aefa-7e6e-4015-9f38-63c9219547c5", "url": "https://infosec.exchange/users/AAKL/statuses/116449675412278045"}, {"timestamp": "2026-04-23T00:00:00Z", "date_only": true, "value": "2026-04-23", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2026-20122", "field": "evidence.0.details.due_date", "uuid": "c289615a-7fd9-4e6a-b760-88e0035a97f7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-26T06:14:16.729Z", "date_only": false, "value": "2026-04-26T06:14:16.729594Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mkevo53epc2s", "record": "CVE-2026-20122", "field": "creation_timestamp", "uuid": "7f10881e-01d3-4578-a9aa-db35ddae41c3", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mkevo53epc2s"}, {"timestamp": "2026-05-15T06:03:19Z", "date_only": false, "value": "2026-05-15T06:03:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/al26-012-critical-vulnerability-affecting-cisco-catalyst-sd-wan-cve-2026-20182", "record": "CVE-2026-20122", "field": "creation_timestamp", "uuid": "1354ed90-efdb-40b1-ab71-45fca3d5504f", "url": "https://cyber.gc.ca/en/alerts-advisories/al26-012-critical-vulnerability-affecting-cisco-catalyst-sd-wan-cve-2026-20182"}, {"timestamp": "2026-06-01T13:22:22Z", "date_only": false, "value": "2026-06-01T13:22:22+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2026-20122", "field": "timestamps.asserted_at", "uuid": "9174104f-281b-4e61-abb0-e91d902f2b4b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T13:22:22Z", "date_only": false, "value": "2026-06-01T13:22:22+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2026-20122", "field": "timestamps.first_seen_at", "uuid": "9174104f-281b-4e61-abb0-e91d902f2b4b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T13:22:22Z", "date_only": false, "value": "2026-06-01T13:22:22+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2026-20122", "field": "status.status_updated_at", "uuid": "9174104f-281b-4e61-abb0-e91d902f2b4b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T13:22:22.601Z", "date_only": false, "value": "2026-06-01T13:22:22.601Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2026-20122", "field": "evidence.0.details.added_date", "uuid": "9174104f-281b-4e61-abb0-e91d902f2b4b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-07T16:32:02.095Z", "date_only": false, "value": "2026-06-07T16:32:02.095352Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mnplrje4632q", "record": "CVE-2026-20122", "field": "creation_timestamp", "uuid": "079eb171-9934-4030-8880-934721e43d89", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3mnplrje4632q"}, {"timestamp": "2026-06-17T10:17:09.043Z", "date_only": false, "value": "2026-06-17T10:17:09.043", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-20122", "record": "FKIE_CVE-2026-20122", "field": "lastModified"}, {"timestamp": "2026-06-19T12:41:46Z", "date_only": false, "value": "2026-06-19T12:41:46+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2026-20122", "field": "timestamps.recorded_at", "uuid": "9174104f-281b-4e61-abb0-e91d902f2b4b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-19T12:42:06.122Z", "date_only": false, "value": "2026-06-19T12:42:06.122658Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/9174104f-281b-4e61-abb0-e91d902f2b4b", "record": "CVE-2026-20122", "field": "creation_timestamp", "uuid": "49352e5c-78cf-4d7f-925b-ab59e337213d", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/9174104f-281b-4e61-abb0-e91d902f2b4b"}, {"timestamp": "2026-06-19T12:45:13.167Z", "date_only": false, "value": "2026-06-19T12:45:13.167723Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/36939b49-5117-413e-985b-6903ccbe68ae", "record": "CVE-2026-20122", "field": "creation_timestamp", "uuid": "79cf7818-d583-42df-867b-8a7afba4b8da", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/36939b49-5117-413e-985b-6903ccbe68ae"}, {"timestamp": "2026-06-23T14:03:39.525Z", "date_only": false, "value": "2026-06-23T14:03:39.525625Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a432a19c-49e5-46bc-957f-64746d637ebb", "record": "CVE-2026-20122", "field": "creation_timestamp", "uuid": "61f079dd-4070-4812-a545-1230cecd8c7b", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a432a19c-49e5-46bc-957f-64746d637ebb"}, {"timestamp": "2026-08-18T19:00:04.619Z", "date_only": false, "value": "2026-08-18T19:00:04.619259Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/VulnerabilityNews/42060", "record": "CVE-2026-20122", "field": "creation_timestamp", "uuid": "6b375ab6-75db-4e9f-a620-236196d7eb88", "url": "https://t.me/VulnerabilityNews/42060"}, {"timestamp": "2026-08-19T00:00:09.569Z", "date_only": false, "value": "2026-08-19T00:00:09.569020Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/VulnerabilityNews/42060", "record": "CVE-2026-20122", "field": "creation_timestamp", "uuid": "a4a5a651-cba9-4896-b52b-895c8dd9c749", "url": "https://t.me/VulnerabilityNews/42060"}, {"timestamp": "2026-09-01T17:00:12.650Z", "date_only": false, "value": "2026-09-01T17:00:12.650293Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/7871", "record": "CVE-2026-20122", "field": "creation_timestamp", "uuid": "1b9b8516-fc20-4a27-b0eb-0e42df0bef60", "url": "https://t.me/cissp/7871"}]}