{"metadata": {"vulnerability": "CVE-2025-20393", "count": 202, "kinds": {"milestone": 9, "sighting": 159, "kev": 11, "other": 23}}, "data": [{"timestamp": "2024-10-10T19:15:13.266Z", "date_only": false, "value": "2024-10-10T19:15:13.266Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-20393", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0398", "record": "NCSC-2025-0398", "field": "document.tracking.generator.date"}, {"timestamp": "2025-12-17T00:00:00Z", "date_only": false, "value": "2025-12-17T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2025-20393", "field": "timestamps.asserted_at", "uuid": "b7d02c20-138f-45e3-92e6-5626f37c19f7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-12-17T00:00:00Z", "date_only": true, "value": "2025-12-17", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-20393", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2025-12-17T00:00:00Z", "date_only": true, "value": "2025-12-17", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2025-20393", "field": "evidence.0.details.date_added", "uuid": "b7d02c20-138f-45e3-92e6-5626f37c19f7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-12-17T00:00:00Z", "date_only": false, "value": "2025-12-17T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2025-20393", "field": "timestamps.first_seen_at", "uuid": "b7d02c20-138f-45e3-92e6-5626f37c19f7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-12-17T00:00:00Z", "date_only": true, "value": "2025-12-17", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-1120", "record": "CERTFR-2025-AVI-1120", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-12-17T00:00:00Z", "date_only": false, "value": "2025-12-17T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2025-20393", "field": "status.status_updated_at", "uuid": "b7d02c20-138f-45e3-92e6-5626f37c19f7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-12-17T16:00:00Z", "date_only": false, "value": "2025-12-17T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-SMA-ATTACK-N9BF4", "record": "CISCO-SA-SMA-ATTACK-N9BF4", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-12-17T16:00:23Z", "date_only": false, "value": "2025-12-17T16:00:23+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-SMA-ATTACK-N9BF4", "record": "CISCO-SA-SMA-ATTACK-N9BF4", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-12-17T16:47:13.128Z", "date_only": false, "value": "2025-12-17T16:47:13.128Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-20393", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-12-17T17:03:45.627Z", "date_only": false, "value": "2025-12-17T17:03:45.627329Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/AAKL/statuses/115735906228666088", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "c4ec4406-0c7c-45da-a311-4de612b73adb", "url": "https://infosec.exchange/users/AAKL/statuses/115735906228666088"}, {"timestamp": "2025-12-17T17:15:48Z", "date_only": false, "value": "2025-12-17T17:15:48Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-MRGJ-CG36-FGQ8", "record": "GHSA-MRGJ-CG36-FGQ8", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-12-17T17:15:48.523Z", "date_only": false, "value": "2025-12-17T17:15:48.523", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-20393", "record": "FKIE_CVE-2025-20393", "field": "published"}, {"timestamp": "2025-12-17T17:17:20.846Z", "date_only": false, "value": "2025-12-17T17:17:20.846478Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pylos.co/post/3ma7645ozwk2t", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "32f714ce-1a06-4855-b14a-78e5cd8da6ab", "url": "https://bsky.app/profile/pylos.co/post/3ma7645ozwk2t"}, {"timestamp": "2025-12-17T17:23:48.747Z", "date_only": false, "value": "2025-12-17T17:23:48.747398Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/tcpdump101.com/post/3ma76hkaopk2r", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "4afaf788-18bd-4137-93bf-b9c08806077b", "url": "https://bsky.app/profile/tcpdump101.com/post/3ma76hkaopk2r"}, {"timestamp": "2025-12-17T17:30:37Z", "date_only": false, "value": "2025-12-17T17:30:37.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/Darkcrai86/9d33b7c5d9155690b8fca5bf2a77de5d", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "cd51a8e7-4346-4998-a62d-56b4bbe4c46f", "url": "https://gist.github.com/Darkcrai86/9d33b7c5d9155690b8fca5bf2a77de5d"}, {"timestamp": "2025-12-17T17:31:29.402Z", "date_only": false, "value": "2025-12-17T17:31:29.402787Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ma76vhwudx2u", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "40e9e8dd-033d-4768-a4cb-f052738129fc", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3ma76vhwudx2u"}, {"timestamp": "2025-12-17T17:31:42.202Z", "date_only": false, "value": "2025-12-17T17:31:42.202484Z", "kind": "sighting", "label": "Seen", "source": "https://cyberplace.social/users/GossiTheDog/statuses/115736096981544283", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "fb30aaea-84fb-4e60-9a55-3bbdc97fc15d", "url": "https://cyberplace.social/users/GossiTheDog/statuses/115736096981544283"}, {"timestamp": "2025-12-17T18:31:33Z", "date_only": false, "value": "2025-12-17T18:31:33Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-MRGJ-CG36-FGQ8", "record": "GHSA-MRGJ-CG36-FGQ8", "field": "published"}, {"timestamp": "2025-12-17T18:56:27.668Z", "date_only": false, "value": "2025-12-17T18:56:27.668560Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3ma7dnfn2rf2o", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "c7f74ff2-aee0-4a73-902c-124de1590a2f", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3ma7dnfn2rf2o"}, {"timestamp": "2025-12-17T18:57:18.802Z", "date_only": false, "value": "2025-12-17T18:57:18.802768Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/defendopsdiaries/statuses/115736434338793609", "record": "cve-2025-20393", "field": "creation_timestamp", "uuid": "c6213457-074a-45b2-af8d-da6a25b12917", "url": "https://infosec.exchange/users/defendopsdiaries/statuses/115736434338793609"}, {"timestamp": "2025-12-17T19:09:38Z", "date_only": false, "value": "2025-12-17T19:09:38.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/12/17/cisco-email-security-appliances-rooted.html", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "2f591c6f-d541-4fa9-aa03-696d3cf6d6d8", "url": "https://threatintel.cc/2025/12/17/cisco-email-security-appliances-rooted.html"}, {"timestamp": "2025-12-17T19:16:00.135Z", "date_only": false, "value": "2025-12-17T19:16:00.135378Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/115736507777709940", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "a46432ad-4ebf-4be8-ba3e-8b8802921581", "url": "https://infosec.exchange/users/DarkWebInformer/statuses/115736507777709940"}, {"timestamp": "2025-12-17T19:40:04.988Z", "date_only": false, "value": "2025-12-17T19:40:04.988958Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/vuldb/statuses/115736602513948059", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "f1aecd9b-1e66-4437-bad7-d92dcd52ed8e", "url": "https://infosec.exchange/users/vuldb/statuses/115736602513948059"}, {"timestamp": "2025-12-17T19:47:00.346Z", "date_only": false, "value": "2025-12-17T19:47:00.346651Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2025-0398", "record": "NCSC-2025-0398", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-12-17T19:47:00.346Z", "date_only": false, "value": "2025-12-17T19:47:00.346651Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2025-0398", "record": "NCSC-2025-0398", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-12-17T19:47:00.346Z", "date_only": false, "value": "2025-12-17T19:47:00.346651Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0398", "record": "NCSC-2025-0398", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-12-17T19:49:24Z", "date_only": false, "value": "2025-12-17T19:49:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/cisco-security-advisory-av25-848", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "56e6ee78-235d-4fa9-98d7-9b2959470da7", "url": "https://cyber.gc.ca/en/alerts-advisories/cisco-security-advisory-av25-848"}, {"timestamp": "2025-12-17T20:09:31.872Z", "date_only": false, "value": "2025-12-17T20:09:31.872924Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/115736718310553757", "record": "cve-2025-20393", "field": "creation_timestamp", "uuid": "5013e666-5e51-4207-ba5d-3cf0b2866df6", "url": "https://infosec.exchange/users/edwardk/statuses/115736718310553757"}, {"timestamp": "2025-12-17T20:40:15.044Z", "date_only": false, "value": "2025-12-17T20:40:15.044100Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/peterrobards.bsky.social/post/3ma7jgvn65s2d", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "9fd3b9a8-7352-42c9-b913-41ec5d4f7c69", "url": "https://bsky.app/profile/peterrobards.bsky.social/post/3ma7jgvn65s2d"}, {"timestamp": "2025-12-17T20:50:04.555Z", "date_only": false, "value": "2025-12-17T20:50:04.555146Z", "kind": "sighting", "label": "Seen", "source": "https://social.circl.lu/users/circl/statuses/115736877746872257", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "c4ec3e4d-70bf-4234-b4a4-6571da812e88", "url": "https://social.circl.lu/users/circl/statuses/115736877746872257"}, {"timestamp": "2025-12-17T20:58:19.082Z", "date_only": false, "value": "2025-12-17T20:58:19.082856Z", "kind": "sighting", "label": "Seen", "source": "https://vulnerability.circl.lu/bundle/fa5775cb-515d-41b8-b18e-c17a50ec6630", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "a0d61686-2e91-4e03-9f5d-9c7bab81f347", "url": "https://vulnerability.circl.lu/bundle/fa5775cb-515d-41b8-b18e-c17a50ec6630"}, {"timestamp": "2025-12-17T21:14:25.814Z", "date_only": false, "value": "2025-12-17T21:14:25.814045Z", "kind": "sighting", "label": "Exploited", "source": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sma-attack-N9bf4", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "36571056-ad11-4a4f-8810-b67a97a23dbe", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sma-attack-N9bf4"}, {"timestamp": "2025-12-17T21:30:46Z", "date_only": false, "value": "2025-12-17T21:30:46Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-MRGJ-CG36-FGQ8", "record": "GHSA-MRGJ-CG36-FGQ8", "field": "modified"}, {"timestamp": "2025-12-17T21:33:23.073Z", "date_only": false, "value": "2025-12-17T21:33:23.073021Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/concisecyber.bsky.social/post/3ma7mfzamys2u", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "da741050-7e7b-45fb-ac69-65624b8a507b", "url": "https://bsky.app/profile/concisecyber.bsky.social/post/3ma7mfzamys2u"}, {"timestamp": "2025-12-17T22:29:04.638Z", "date_only": false, "value": "2025-12-17T22:29:04.638472Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityish.bsky.social/post/3ma7pjlm6af27", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "c575cba8-df04-4c6d-a357-cc57788c476e", "url": "https://bsky.app/profile/securityish.bsky.social/post/3ma7pjlm6af27"}, {"timestamp": "2025-12-17T22:36:28.949Z", "date_only": false, "value": "2025-12-17T22:36:28.949684Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/campuscodi.risky.biz/post/3ma7pwsaql22o", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "e2751cd1-7934-4c9f-9c62-e90db2f8604c", "url": "https://bsky.app/profile/campuscodi.risky.biz/post/3ma7pwsaql22o"}, {"timestamp": "2025-12-17T22:59:07.928Z", "date_only": false, "value": "2025-12-17T22:59:07.928080Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3ma7r7d6rjo2m", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "57d46410-1d80-45ff-85de-a3a3ff71a0c4", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3ma7r7d6rjo2m"}, {"timestamp": "2025-12-17T23:00:00Z", "date_only": false, "value": "2025-12-17T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2870", "record": "WID-SEC-W-2025-2870", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-12-17T23:00:00Z", "date_only": false, "value": "2025-12-17T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2870", "record": "WID-SEC-W-2025-2870", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-12-17T23:00:00Z", "date_only": false, "value": "2025-12-17T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2870", "record": "WID-SEC-W-2025-2870", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-12-18T00:00:00Z", "date_only": false, "value": "2025-12-18T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-1120", "record": "CERTFR-2025-AVI-1120", "field": "last_revision_date"}, {"timestamp": "2025-12-18T00:00:00Z", "date_only": false, "value": "2025-12-18T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-1120", "record": "CERTFR-2025-AVI-1120", "field": "initial_release_date"}, {"timestamp": "2025-12-18T00:00:00Z", "date_only": false, "value": "2025-12-18T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-1120", "record": "CERTFR-2025-AVI-1120", "field": "revisions.0.revision_date"}, {"timestamp": "2025-12-18T00:38:09.639Z", "date_only": false, "value": "2025-12-18T00:38:09.639935Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/intcyberdigest.bsky.social/post/3ma7wqfdgnq27", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "e2d00f4d-4f63-4944-905e-ce3493770474", "url": "https://bsky.app/profile/intcyberdigest.bsky.social/post/3ma7wqfdgnq27"}, {"timestamp": "2025-12-18T00:39:43.687Z", "date_only": false, "value": "2025-12-18T00:39:43.687408Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3ma7wt7twj627", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "6269419d-2e22-435d-84ac-9a0ef8f66c41", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3ma7wt7twj627"}, {"timestamp": "2025-12-18T02:20:51.932Z", "date_only": false, "value": "2025-12-18T02:20:51.932376Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3maa4i2wdhv23", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "8d2da79e-1316-4f7e-9705-69be81a24e44", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3maa4i2wdhv23"}, {"timestamp": "2025-12-18T02:57:36.818Z", "date_only": false, "value": "2025-12-18T02:57:36.818679Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/115738322934985655", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "5bc72bff-dc4b-4828-a018-395217df095d", "url": "https://infosec.exchange/users/DarkWebInformer/statuses/115738322934985655"}, {"timestamp": "2025-12-18T04:00:00Z", "date_only": false, "value": "2025-12-18T04:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1708", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "4b3a1616-cdf2-48c8-8b29-e1a97de8e39a", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1708"}, {"timestamp": "2025-12-18T04:01:27.187Z", "date_only": false, "value": "2025-12-18T04:01:27.187702Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3maac3wsdd52a", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "260e80db-4b82-4915-9075-98f1a773c4c4", "url": "https://bsky.app/profile/pigondrugs.bsky.social/post/3maac3wsdd52a"}, {"timestamp": "2025-12-18T04:49:52.246Z", "date_only": false, "value": "2025-12-18T04:49:52.246562Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3maaesielak2g", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "7c0f3f71-5551-4815-998b-953e82cf0da4", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3maaesielak2g"}, {"timestamp": "2025-12-18T04:55:22.327Z", "date_only": false, "value": "2025-12-18T04:55:22.327258Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-20393", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-12-18T04:55:22.327Z", "date_only": false, "value": "2025-12-18T04:55:22.327258Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-20393", "record": "FKIE_CVE-2025-20393", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-12-18T07:36:07.998Z", "date_only": false, "value": "2025-12-18T07:36:07.998868Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/115739418047097403", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "b0b7f3f3-1ba2-4b5a-9480-02141dbbb18c", "url": "https://infosec.exchange/users/offseq/statuses/115739418047097403"}, {"timestamp": "2025-12-18T07:36:09.247Z", "date_only": false, "value": "2025-12-18T07:36:09.247198Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3maao3tpbyv2k", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "5cf4d276-a4e3-4f15-8ea7-7bcacf1cc59a", "url": "https://bsky.app/profile/offseq.bsky.social/post/3maao3tpbyv2k"}, {"timestamp": "2025-12-18T08:48:25.152Z", "date_only": false, "value": "2025-12-18T08:48:25.152124Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-55bb3226-50a347c31f14a825", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "e906108c-e7e0-4bdd-b353-9fd5a0916a61", "url": "https://poliverso.org/objects/0477a01e-55bb3226-50a347c31f14a825"}, {"timestamp": "2025-12-18T08:50:35.602Z", "date_only": false, "value": "2025-12-18T08:50:35.602007Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-51e3a85f-8592fbe159860167", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "3ec36c32-a47a-4fef-a02d-a828741daad0", "url": "https://poliverso.org/objects/0477a01e-51e3a85f-8592fbe159860167"}, {"timestamp": "2025-12-18T09:03:56.037Z", "date_only": false, "value": "2025-12-18T09:03:56.037281Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/allsafeus.bsky.social/post/3maasys2oka2w", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "e9cd0fd8-956c-4f02-b533-0acca4fff5b8", "url": "https://bsky.app/profile/allsafeus.bsky.social/post/3maasys2oka2w"}, {"timestamp": "2025-12-18T12:34:16.348Z", "date_only": false, "value": "2025-12-18T12:34:16.348946Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mab6qn6b7s24", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "e334483d-1916-4e32-b896-ee9c684b2a25", "url": "https://bsky.app/profile/basefortify.bsky.social/post/3mab6qn6b7s24"}, {"timestamp": "2025-12-18T12:34:17.387Z", "date_only": false, "value": "2025-12-18T12:34:17.387082Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mab6qrecbs24", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "2dbe616e-d6b7-4968-8b1b-28f603384fec", "url": "https://bsky.app/profile/basefortify.bsky.social/post/3mab6qrecbs24"}, {"timestamp": "2025-12-18T12:34:18.683Z", "date_only": false, "value": "2025-12-18T12:34:18.683736Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mab6qtae5s24", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "f87244ac-835e-461a-8e14-4bac8d47fa39", "url": "https://bsky.app/profile/basefortify.bsky.social/post/3mab6qtae5s24"}, {"timestamp": "2025-12-18T13:14:48.146Z", "date_only": false, "value": "2025-12-18T13:14:48.146085Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/decio/statuses/115740749828282191", "record": "cve-2025-20393", "field": "creation_timestamp", "uuid": "3d811dfa-6564-4cca-8e62-a9282de6698e", "url": "https://infosec.exchange/users/decio/statuses/115740749828282191"}, {"timestamp": "2025-12-18T13:31:13Z", "date_only": false, "value": "2025-12-18T13:31:13.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/rilevato-sfruttamento-attivo-di-vulnerabilita-in-prodotti-cisco", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "8fdd5e53-2296-42ad-9420-bbfec4035171", "url": "https://www.acn.gov.it/portale/w/rilevato-sfruttamento-attivo-di-vulnerabilita-in-prodotti-cisco"}, {"timestamp": "2025-12-18T14:02:39.689Z", "date_only": false, "value": "2025-12-18T14:02:39.689845Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jasongarbis.bsky.social/post/3mabdoxnmg226", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "3f5e490b-58ae-4d8f-aead-872fee4cd020", "url": "https://bsky.app/profile/jasongarbis.bsky.social/post/3mabdoxnmg226"}, {"timestamp": "2025-12-18T14:34:47Z", "date_only": false, "value": "2025-12-18T14:34:47.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ed7e8b58-93ec-41c5-b15a-81e92c823798", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "9d7b29fe-8dd4-49a2-9f4c-14f998552979"}, {"timestamp": "2025-12-18T15:00:09Z", "date_only": false, "value": "2025-12-18T15:00:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/7hKD5YeJK0RQiIJ3OrJi5geFO0owuRt0spxMlfyZ7RMSrKY", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "59fed765-988c-4ff4-adbc-abe15237e5a3"}, {"timestamp": "2025-12-18T15:08:31.240Z", "date_only": false, "value": "2025-12-18T15:08:31.240141Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mabheqhzxk2y", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "7bbb090b-c8dc-459b-8631-d459eca54929", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3mabheqhzxk2y"}, {"timestamp": "2025-12-18T15:10:18.411Z", "date_only": false, "value": "2025-12-18T15:10:18.411948Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mabhhx3ku32z", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "3c65c0fc-a478-4f17-8ade-b3d5a2499c07", "url": "https://bsky.app/profile/o2cloud.bsky.social/post/3mabhhx3ku32z"}, {"timestamp": "2025-12-18T18:34:43.152Z", "date_only": false, "value": "2025-12-18T18:34:43.152312Z", "kind": "sighting", "label": "Seen", "source": "https://social.tchncs.de/users/gborn/statuses/115742007788067850", "record": "cve-2025-20393", "field": "creation_timestamp", "uuid": "270bfb8b-73f8-438a-8415-09357b2458bb", "url": "https://social.tchncs.de/users/gborn/statuses/115742007788067850"}, {"timestamp": "2025-12-18T18:35:08.169Z", "date_only": false, "value": "2025-12-18T18:35:08.169507Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/etguenni.bsky.social/post/3mabswbgti22z", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "a6807a0a-7a52-4157-aaaa-3696aaa068ab", "url": "https://bsky.app/profile/etguenni.bsky.social/post/3mabswbgti22z"}, {"timestamp": "2025-12-18T20:07:54.309Z", "date_only": false, "value": "2025-12-18T20:07:54.309041Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/115742374127010949", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "d3da6ac6-c5f6-484d-bf4c-863178b5e86d", "url": "https://infosec.exchange/users/DarkWebInformer/statuses/115742374127010949"}, {"timestamp": "2025-12-18T20:56:27Z", "date_only": false, "value": "2025-12-18T20:56:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_News/11604", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "d6fc68c5-5f10-493a-a131-3841d542fbf4", "content": "\ud83d\udea8 News Alert!\n\nSource: Dark Web Informer\nTitle: CVE-2025-20393: Script to detect for Cisco Secure Email Gateway And Cisco Secure Email and Web Manager\nLink: https://darkwebinformer.com/cve-2025-20393-script-to-detect-for-cisco-secure-email-gateway-and-cisco-secure-email-and-web-manager/", "url": "https://t.me/DarkWebInformer_News/11604"}, {"timestamp": "2025-12-18T21:00:04Z", "date_only": false, "value": "2025-12-18T21:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/utdOlXrxtJhuzozgREzDNv0wfeU39jR5jsj_GoqbUxaQLcM", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "7c4fb350-f6e0-4c0c-b534-f3b735607f78"}, {"timestamp": "2025-12-18T21:02:59.203Z", "date_only": false, "value": "2025-12-18T21:02:59.203530Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mac36l6dvn24", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "a2d8c022-fdcd-4cb9-9189-e66c8e95759d", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mac36l6dvn24"}, {"timestamp": "2025-12-19T02:22:53.515Z", "date_only": false, "value": "2025-12-19T02:22:53.515432Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3macn2mdz322d", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "1ee49bd2-db70-4023-9a55-de5849e6f676", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3macn2mdz322d"}, {"timestamp": "2025-12-19T10:03:16.570Z", "date_only": false, "value": "2025-12-19T10:03:16.570377Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3madgrdrmj2x2", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "6b5ba105-e4d8-4674-8173-36c2217e73a5", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3madgrdrmj2x2"}, {"timestamp": "2025-12-19T11:09:11.231Z", "date_only": false, "value": "2025-12-19T11:09:11.231147Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitycipher.bsky.social/post/3madkhpgvcr2e", "record": "cve-2025-20393", "field": "creation_timestamp", "uuid": "e6f0160d-0f26-44ff-87e1-3457ea832cf2", "url": "https://bsky.app/profile/securitycipher.bsky.social/post/3madkhpgvcr2e"}, {"timestamp": "2025-12-19T15:23:24.025Z", "date_only": false, "value": "2025-12-19T15:23:24.025084Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/115746917786219073", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "da0174b2-c7d6-4621-9863-9f64e8b6e8b2", "url": "https://mastodon.social/ap/users/115426718704364579/statuses/115746917786219073"}, {"timestamp": "2025-12-19T15:55:07.215Z", "date_only": false, "value": "2025-12-19T15:55:07.215402Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/115747042299071028", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "c89dba40-7c27-4fbb-bc04-9dfed01c4c47", "url": "https://mastodon.social/ap/users/115426718704364579/statuses/115747042299071028"}, {"timestamp": "2025-12-19T15:55:12.643Z", "date_only": false, "value": "2025-12-19T15:55:12.643258Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mae2h57ncl2p", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "9d43cda9-a4b0-4e96-9061-7783e7a1a717", "url": "https://bsky.app/profile/netsecio.bsky.social/post/3mae2h57ncl2p"}, {"timestamp": "2025-12-19T18:20:25.401Z", "date_only": false, "value": "2025-12-19T18:20:25.401435Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3maeckdjzzr22", "record": "cve-2025-20393", "field": "creation_timestamp", "uuid": "3f1ab6a2-6f3d-48a4-ba1b-d148c6adcb86", "url": "https://bsky.app/profile/cyberhub.blog/post/3maeckdjzzr22"}, {"timestamp": "2025-12-19T21:00:04Z", "date_only": false, "value": "2025-12-19T21:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/RLO4lnIgvQAk44OqJY3QDoRKjh_YkTOiH0GqDIvLKKnKRKs", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "b8dc78df-4b97-47be-bb52-514e5090e0ad"}, {"timestamp": "2025-12-20T03:28:14.056Z", "date_only": false, "value": "2025-12-20T03:28:14.056104Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mafb6ezlz32j", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "305114dc-def5-43dd-a963-4c581e96e3e3", "url": "https://bsky.app/profile/undercode.bsky.social/post/3mafb6ezlz32j"}, {"timestamp": "2025-12-20T07:59:27.943Z", "date_only": false, "value": "2025-12-20T07:59:27.943160Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mafqdexmas2f", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "a88272d8-0271-4d57-928c-f7b322cc76a4", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mafqdexmas2f"}, {"timestamp": "2025-12-20T10:43:10.005Z", "date_only": false, "value": "2025-12-20T10:43:10.005674Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alirezagharib.net/post/3mafzi2rcbs2u", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "f036ed38-0623-4fed-89f1-f2678d0f2c5f", "url": "https://bsky.app/profile/alirezagharib.net/post/3mafzi2rcbs2u"}, {"timestamp": "2025-12-20T12:33:16.156Z", "date_only": false, "value": "2025-12-20T12:33:16.156500Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mag7mg2kh626", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "e7f4ab1d-9b3e-4bbd-94a3-ae2301d53060", "url": "https://bsky.app/profile/opsmatters.com/post/3mag7mg2kh626"}, {"timestamp": "2025-12-20T15:28:05.382Z", "date_only": false, "value": "2025-12-20T15:28:05.382472Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3magjfiwore2i", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "f4f7874e-1c2b-4e40-9daa-51a242032db1", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3magjfiwore2i"}, {"timestamp": "2025-12-20T18:31:44.698Z", "date_only": false, "value": "2025-12-20T18:31:44.698386Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/shadowserver/statuses/115753320652221549", "record": "cve-2025-20393", "field": "creation_timestamp", "uuid": "b61acc02-e33c-46a3-88ce-8ab67f9f8203", "url": "https://infosec.exchange/users/shadowserver/statuses/115753320652221549"}, {"timestamp": "2025-12-20T18:31:45.563Z", "date_only": false, "value": "2025-12-20T18:31:45.563653Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3magtnm4jc22e", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "7ff7e27b-ee39-4abf-a278-3e2c9aa823a2", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3magtnm4jc22e"}, {"timestamp": "2025-12-20T18:31:46.871Z", "date_only": false, "value": "2025-12-20T18:31:46.871343Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3magtnpwdq22e", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "15b3bd86-3a3c-42e3-9708-89991a7dfb25", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3magtnpwdq22e"}, {"timestamp": "2025-12-20T18:31:48.215Z", "date_only": false, "value": "2025-12-20T18:31:48.215595Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3magtnpwepc2e", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "fe8d5da7-8f18-4457-bf54-c73cdb57fba5", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3magtnpwepc2e"}, {"timestamp": "2025-12-21T02:26:48.221Z", "date_only": false, "value": "2025-12-21T02:26:48.221017Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3maho7h567p2a", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "4506a090-e818-4f63-8d33-c63c250b7f1f", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3maho7h567p2a"}, {"timestamp": "2025-12-21T03:07:41Z", "date_only": false, "value": "2025-12-21T03:07:41.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/12/20/chinese-hackers-targeting-cisco-email.html", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "55157c86-5cd9-4ce9-bab5-1b001baa2b90", "url": "https://threatintel.cc/2025/12/20/chinese-hackers-targeting-cisco-email.html"}, {"timestamp": "2025-12-21T03:33:33.497Z", "date_only": false, "value": "2025-12-21T03:33:33.497706Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3mahrwsqp5b26", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "da954c91-6dac-40f6-bb7d-7ec0e8e84827", "url": "https://bsky.app/profile/bluesky.awakari.com/post/3mahrwsqp5b26"}, {"timestamp": "2025-12-21T03:33:36.059Z", "date_only": false, "value": "2025-12-21T03:33:36.059475Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/LLMs.activitypub.awakari.com.ap.brid.gy/post/3mahrwulp2ov2", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "6bfd0577-00d2-48f4-8135-67ee058ab8f9", "url": "https://bsky.app/profile/LLMs.activitypub.awakari.com.ap.brid.gy/post/3mahrwulp2ov2"}, {"timestamp": "2025-12-21T04:07:30.002Z", "date_only": false, "value": "2025-12-21T04:07:30.002247Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/115755584693851031", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "90e49522-0c97-40c5-b68b-cacda851f1aa", "url": "https://infosec.exchange/users/edwardk/statuses/115755584693851031"}, {"timestamp": "2025-12-21T06:33:32.543Z", "date_only": false, "value": "2025-12-21T06:33:32.543056Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mai3ybvnmc2i", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "51c1f7ee-0ed6-4f89-9698-c38308952150", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mai3ybvnmc2i"}, {"timestamp": "2025-12-21T06:45:10.211Z", "date_only": false, "value": "2025-12-21T06:45:10.211195Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mai4ngucos2i", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "7ea06444-5381-4516-8803-58258aadcd59", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mai4ngucos2i"}, {"timestamp": "2025-12-21T08:32:35.302Z", "date_only": false, "value": "2025-12-21T08:32:35.302794Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3maicnfyyps2i", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "3fc07c85-eabd-46a6-bdc4-4c501f20a684", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3maicnfyyps2i"}, {"timestamp": "2025-12-21T08:37:12.191Z", "date_only": false, "value": "2025-12-21T08:37:12.191481Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/redhotcyber.bsky.social/post/3maicvqz77y2o", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "d4b366d2-8ab2-4138-8313-3c223bfec10b", "url": "https://bsky.app/profile/redhotcyber.bsky.social/post/3maicvqz77y2o"}, {"timestamp": "2025-12-21T10:04:34.894Z", "date_only": false, "value": "2025-12-21T10:04:34.894322Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-2f900a84-73ab83706da1f16b", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "778e8714-e456-41b5-85a7-c2409e2fe320", "url": "https://poliverso.org/objects/0477a01e-2f900a84-73ab83706da1f16b"}, {"timestamp": "2025-12-21T10:42:41.982Z", "date_only": false, "value": "2025-12-21T10:42:41.982804Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3maijw2gpteg2", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "d1188e8d-5bd0-46b3-9909-65bd3afc1801", "url": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3maijw2gpteg2"}, {"timestamp": "2025-12-21T11:37:38.997Z", "date_only": false, "value": "2025-12-21T11:37:38.997696Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3maimygvzqp2a", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "88c4025f-4958-4755-a70a-ef52f1d9a7e6", "url": "https://bsky.app/profile/eyalestrin.bsky.social/post/3maimygvzqp2a"}, {"timestamp": "2025-12-21T18:43:03.173Z", "date_only": false, "value": "2025-12-21T18:43:03.173878Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3majer4b2542o", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "25e69b48-2e82-4004-b5ea-c7890e59ebb1", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3majer4b2542o"}, {"timestamp": "2025-12-21T21:00:05.327Z", "date_only": false, "value": "2025-12-21T21:00:05.327093Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3majmg645nh2p", "record": "cve-2025-20393", "field": "creation_timestamp", "uuid": "e9da435c-1113-404e-9e0a-1749dfd3269e", "url": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3majmg645nh2p"}, {"timestamp": "2025-12-22T02:26:25.203Z", "date_only": false, "value": "2025-12-22T02:26:25.203127Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mak6noxd4f2u", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "065881b8-6985-4240-8ca1-895dc241292e", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mak6noxd4f2u"}, {"timestamp": "2025-12-22T04:44:10.565Z", "date_only": false, "value": "2025-12-22T04:44:10.565781Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3makgdzb62u2w", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "64bbd2f1-7973-4b06-bebc-de4832e76db0", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3makgdzb62u2w"}, {"timestamp": "2025-12-22T18:46:03.811Z", "date_only": false, "value": "2025-12-22T18:46:03.811208Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3malvffum7r2w", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "7a839634-4bb4-4af4-8f5c-36452a0a795c", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3malvffum7r2w"}, {"timestamp": "2025-12-22T20:40:23.583Z", "date_only": false, "value": "2025-12-22T20:40:23.583814Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mam3rfumr52o", "record": "cve-2025-20393", "field": "creation_timestamp", "uuid": "b655021c-ccb9-4123-b861-520b1d81b8a8", "url": "https://bsky.app/profile/cyberhub.blog/post/3mam3rfumr52o"}, {"timestamp": "2025-12-23T02:23:53.501Z", "date_only": false, "value": "2025-12-23T02:23:53.501790Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mamoy3lpvm2p", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "96b9ceac-828c-4cb7-ad7d-375a55a3f823", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mamoy3lpvm2p"}, {"timestamp": "2025-12-23T05:25:10.568Z", "date_only": false, "value": "2025-12-23T05:25:10.568248Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mamz3zkhdz2z", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "d9f72307-5574-41c9-a07f-6cdb7bed4cfc", "url": "https://bsky.app/profile/opsmatters.com/post/3mamz3zkhdz2z"}, {"timestamp": "2025-12-23T10:35:18Z", "date_only": false, "value": "2025-12-23T10:35:18.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/xakep_ru/18687", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "43747d05-da8c-435e-acaa-9f66b337f782", "content": "Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043e \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 AsyncOS\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u043d\u0435\u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u043e\u0439 0-day-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Cisco AsyncOS, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Secure Email Gateway (SEG) \u0438 Secure Email and Web Manager (SEWM).\n\nhttps://xakep.ru/2025/12/23/cve-2025-20393/", "url": "https://t.me/xakep_ru/18687"}, {"timestamp": "2025-12-23T13:32:02.727Z", "date_only": false, "value": "2025-12-23T13:32:02.727397Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/concisecyber.bsky.social/post/3manuctiwip2u", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "ef35db3d-b594-450b-b88e-284fb7af9037", "url": "https://bsky.app/profile/concisecyber.bsky.social/post/3manuctiwip2u"}, {"timestamp": "2025-12-24T00:00:00Z", "date_only": true, "value": "2025-12-24", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2025-20393", "field": "evidence.0.details.due_date", "uuid": "b7d02c20-138f-45e3-92e6-5626f37c19f7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-12-24T02:22:25.077Z", "date_only": false, "value": "2025-12-24T02:22:25.077138Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3map7eeffkz2x", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "53a58d22-f5ac-4f75-a7f7-7634d2afd214", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3map7eeffkz2x"}, {"timestamp": "2025-12-24T09:12:37.815Z", "date_only": false, "value": "2025-12-24T09:12:37.815495Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nilab.mstdn.jp.ap.brid.gy/post/3mapwbk4xdos2", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "e64bcb4d-d2df-4778-917e-87de1681b6ce", "url": "https://bsky.app/profile/nilab.mstdn.jp.ap.brid.gy/post/3mapwbk4xdos2"}, {"timestamp": "2025-12-24T10:01:01.930Z", "date_only": false, "value": "2025-12-24T10:01:01.930449Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/guardian360.bsky.social/post/3mapyygsv6x22", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "de37b7cc-4545-4fe2-8673-c6f83de21421", "url": "https://bsky.app/profile/guardian360.bsky.social/post/3mapyygsv6x22"}, {"timestamp": "2025-12-25T02:23:45.337Z", "date_only": false, "value": "2025-12-25T02:23:45.337192Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3marpvokz3j2w", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "3e35902e-6067-4d0c-bee1-5e5b900280ff", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3marpvokz3j2w"}, {"timestamp": "2025-12-25T22:47:55Z", "date_only": false, "value": "2025-12-25T22:47:55.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ed7e8b58-93ec-41c5-b15a-81e92c823798", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "757f908a-1a9f-4d86-a0c7-6b56e09fec5c"}, {"timestamp": "2025-12-26T05:02:37.078Z", "date_only": false, "value": "2025-12-26T05:02:37.078715Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mauja34whs2w", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "b5a2d84b-7717-435d-9c73-6ca6ba9979dc", "url": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mauja34whs2w"}, {"timestamp": "2025-12-27T02:21:54.437Z", "date_only": false, "value": "2025-12-27T02:21:54.437016Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mawqq7m4sf2g", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "230594a0-e36c-4691-a26f-1e1ebf114a0c", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mawqq7m4sf2g"}, {"timestamp": "2025-12-27T13:30:15.340Z", "date_only": false, "value": "2025-12-27T13:30:15.340349Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kpwn.infosec.exchange.ap.brid.gy/post/3maxw33krrao2", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "8b8b0a1f-862c-43a8-9217-2f29a1353779", "url": "https://bsky.app/profile/kpwn.infosec.exchange.ap.brid.gy/post/3maxw33krrao2"}, {"timestamp": "2026-01-07T03:00:06Z", "date_only": false, "value": "2026-01-07T03:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/3pBq5cR6IlqeDtmbK0wx8m04HXDRqV_g5yEoTFBTOYd5yjQ", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "db02d435-3ab7-4241-9e86-a21d87dae560"}, {"timestamp": "2026-01-15T16:01:43Z", "date_only": false, "value": "2026-01-15T16:01:43+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-SMA-ATTACK-N9BF4", "record": "CISCO-SA-SMA-ATTACK-N9BF4", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-01-15T16:01:43Z", "date_only": false, "value": "2026-01-15T16:01:43+00:00", "kind": "other", "label": "Updated", "source": "csaf_cisco \u00b7 CISCO-SA-SMA-ATTACK-N9BF4", "record": "CISCO-SA-SMA-ATTACK-N9BF4", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-01-15T16:01:59Z", "date_only": false, "value": "2026-01-15T16:01:59+00:00", "kind": "other", "label": "Document generated", "source": "csaf_cisco \u00b7 CISCO-SA-SMA-ATTACK-N9BF4", "record": "CISCO-SA-SMA-ATTACK-N9BF4", "field": "document.tracking.generator.date"}, {"timestamp": "2026-01-15T16:32:03.740Z", "date_only": false, "value": "2026-01-15T16:32:03.740Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / cisco", "record": "CVE-2025-20393", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-01-15T23:00:00Z", "date_only": false, "value": "2026-01-15T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2870", "record": "WID-SEC-W-2025-2870", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-01-15T23:00:00Z", "date_only": false, "value": "2026-01-15T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2870", "record": "WID-SEC-W-2025-2870", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-01-15T23:48:12.002Z", "date_only": false, "value": "2026-01-15T23:48:12.002702Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mcirhquxps2v", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "fbe0f676-a191-4b78-979c-c75497626fda", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mcirhquxps2v"}, {"timestamp": "2026-01-16T00:32:57.943Z", "date_only": false, "value": "2026-01-16T00:32:57.943199Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/lavxnews.bsky.social/post/3mcitxt6cbs2x", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "d526914f-9d7b-4289-99bd-9bdec4eb77ee", "url": "https://bsky.app/profile/lavxnews.bsky.social/post/3mcitxt6cbs2x"}, {"timestamp": "2026-01-16T04:38:00Z", "date_only": false, "value": "2026-01-16T04:38:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2026/01/cisco-patches-zero-day-rce-exploited-by.html", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "23e6bdd2-961d-4766-901c-6df6ea958fb0", "url": "https://thehackernews.com/2026/01/cisco-patches-zero-day-rce-exploited-by.html"}, {"timestamp": "2026-01-16T06:41:59.527Z", "date_only": false, "value": "2026-01-16T06:41:59.527580Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mcjilouxca2o", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "5910ed25-9424-4f62-9ff5-c0e596acbc70", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mcjilouxca2o"}, {"timestamp": "2026-01-16T08:14:18.177Z", "date_only": false, "value": "2026-01-16T08:14:18.177372Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/lavxnews.bsky.social/post/3mcjnqqx5jk2r", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "aca62279-50b5-4e28-99af-f9a4dade3c2e", "url": "https://bsky.app/profile/lavxnews.bsky.social/post/3mcjnqqx5jk2r"}, {"timestamp": "2026-01-16T09:34:28.738Z", "date_only": false, "value": "2026-01-16T09:34:28.738425Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mcjsa4rv2y2r", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "80611187-4001-4e4e-8d18-3b2532378427", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mcjsa4rv2y2r"}, {"timestamp": "2026-01-16T09:46:06.634Z", "date_only": false, "value": "2026-01-16T09:46:06.634976Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mcjsuwj5mu2j", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "e8832337-4de7-4c93-9517-0db0aa9aba30", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mcjsuwj5mu2j"}, {"timestamp": "2026-01-16T11:34:41Z", "date_only": false, "value": "2026-01-16T11:34:41.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2026/01/16/chinalinked-apt-uat-abused-now.html", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "a3de3236-8a90-4a00-a164-adf8368a5284", "url": "https://threatintel.cc/2026/01/16/chinalinked-apt-uat-abused-now.html"}, {"timestamp": "2026-01-16T11:34:56.268Z", "date_only": false, "value": "2026-01-16T11:34:56.268750Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mcjyxjjbay26", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "28cdba30-5ecf-4018-9ca5-95fc7a4ea8e4", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3mcjyxjjbay26"}, {"timestamp": "2026-01-16T11:50:58.841Z", "date_only": false, "value": "2026-01-16T11:50:58.841+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-2870", "record": "WID-SEC-W-2025-2870", "field": "document.tracking.generator.date"}, {"timestamp": "2026-01-16T12:34:33.443Z", "date_only": false, "value": "2026-01-16T12:34:33.443448Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/115904798574016515", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "0ff60564-9750-449f-a5f7-165b26177607", "url": "https://infosec.exchange/users/edwardk/statuses/115904798574016515"}, {"timestamp": "2026-01-16T13:13:29.867Z", "date_only": false, "value": "2026-01-16T13:13:29.867853Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/780thmibdecyber.bsky.social/post/3mck6hoqsgk2n", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "7acb8d3f-a310-4ed5-a28f-14e1c7ff1b5f", "url": "https://bsky.app/profile/780thmibdecyber.bsky.social/post/3mck6hoqsgk2n"}, {"timestamp": "2026-01-16T14:57:49.946Z", "date_only": false, "value": "2026-01-16T14:57:49.946667Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mckec3drls2y", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "c3929d0f-ec6f-4719-8f3e-fe4e2d700496", "url": "https://bsky.app/profile/helpnetsecurity.com/post/3mckec3drls2y"}, {"timestamp": "2026-01-16T14:58:34.149Z", "date_only": false, "value": "2026-01-16T14:58:34.149618Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mckedjpvrs2y", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "56d62473-1cb4-4824-b011-ae9d6093efc4", "url": "https://bsky.app/profile/helpnetsecurity.com/post/3mckedjpvrs2y"}, {"timestamp": "2026-01-16T15:27:41.606Z", "date_only": false, "value": "2026-01-16T15:27:41.606269Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mckfxpy6zd2x", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "04c50fe0-e93d-4883-ace5-4425e9d74ca9", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mckfxpy6zd2x"}, {"timestamp": "2026-01-16T16:00:15.009Z", "date_only": false, "value": "2026-01-16T16:00:15.009386Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nz-nb.bsky.social/post/3mckhrwsfbo24", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "2a7dff4a-d9d8-4ee9-a568-f21eb9f8eb0a", "url": "https://bsky.app/profile/nz-nb.bsky.social/post/3mckhrwsfbo24"}, {"timestamp": "2026-01-16T16:35:08.170Z", "date_only": false, "value": "2026-01-16T16:35:08.170826Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mckjqczi2x22", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "6e41d757-f4b2-4a85-8642-7ecb7ca0b7b5", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mckjqczi2x22"}, {"timestamp": "2026-01-16T17:09:06.307Z", "date_only": false, "value": "2026-01-16T17:09:06.307885Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberdudebivash.bsky.social/post/3mcklmu4lms2f", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "10d528ac-775f-460b-a5a2-1c8dd1897590", "url": "https://bsky.app/profile/cyberdudebivash.bsky.social/post/3mcklmu4lms2f"}, {"timestamp": "2026-01-16T19:12:50.418Z", "date_only": false, "value": "2026-01-16T19:12:50.418430Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mckskdgfu723", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "1077610a-9a51-4412-97a3-8e1227863a0b", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mckskdgfu723"}, {"timestamp": "2026-01-17T02:21:47.785Z", "date_only": false, "value": "2026-01-17T02:21:47.785527Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mclkjdwieu2a", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "b6af30a8-a839-40c7-8588-c115f5fbc997", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mclkjdwieu2a"}, {"timestamp": "2026-01-17T08:10:08.419Z", "date_only": false, "value": "2026-01-17T08:10:08.419366Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sctocs.bsky.social/post/3mcm5y3nats2k", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "4bfc153e-f851-4a7d-8587-1bf9f13e565c", "url": "https://bsky.app/profile/sctocs.bsky.social/post/3mcm5y3nats2k"}, {"timestamp": "2026-01-17T08:57:47.604Z", "date_only": false, "value": "2026-01-17T08:57:47.604924Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mcmanh6ngk2m", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "df6cfbdf-98b5-456c-952c-dc32bdc5cbb2", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mcmanh6ngk2m"}, {"timestamp": "2026-01-17T15:19:04.124Z", "date_only": false, "value": "2026-01-17T15:19:04.124081Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mcmvx7x7s72w", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "673dfdec-d4bb-4e4d-9079-743902343967", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3mcmvx7x7s72w"}, {"timestamp": "2026-01-17T16:24:19.168Z", "date_only": false, "value": "2026-01-17T16:24:19.168125Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mcmzluwfxc2m", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "2478ad2f-27b5-40ba-b92d-91c9f51fe866", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mcmzluwfxc2m"}, {"timestamp": "2026-01-18T00:02:12.863Z", "date_only": false, "value": "2026-01-18T00:02:12.863390Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/rankednews.bsky.social/post/3mcnt6ofna624", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "a0e110e5-9c71-4b8e-ba87-b7eadd8a9b9d", "url": "https://bsky.app/profile/rankednews.bsky.social/post/3mcnt6ofna624"}, {"timestamp": "2026-01-18T09:06:02.093Z", "date_only": false, "value": "2026-01-18T09:06:02.093207Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pvynckier.bsky.social/post/3mcorkxzvtc2e", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "f7a8b7d5-9b97-40a5-aa16-c501ebb40364", "url": "https://bsky.app/profile/pvynckier.bsky.social/post/3mcorkxzvtc2e"}, {"timestamp": "2026-01-18T09:51:16.939Z", "date_only": false, "value": "2026-01-18T09:51:16.939960Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mcou3v6e5k2k", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "918db919-6d50-47dd-9cc1-94db31669014", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mcou3v6e5k2k"}, {"timestamp": "2026-01-18T09:58:29.637Z", "date_only": false, "value": "2026-01-18T09:58:29.637822Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mcouinoetk2k", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "27d5daac-a759-4700-9375-aff3136b455e", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mcouinoetk2k"}, {"timestamp": "2026-01-18T10:01:34.610Z", "date_only": false, "value": "2026-01-18T10:01:34.610138Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mcouocdb4k2k", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "a70bb844-8a48-4ce5-a281-e05d2db5cd88", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mcouocdb4k2k"}, {"timestamp": "2026-01-18T10:03:43.154Z", "date_only": false, "value": "2026-01-18T10:03:43.154742Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mcous36e6s2k", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "d26d617a-8405-4da5-886c-f6d21113a588", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mcous36e6s2k"}, {"timestamp": "2026-01-18T13:23:15.405Z", "date_only": false, "value": "2026-01-18T13:23:15.405151Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mcp7x2ti652o", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "baa9569e-5342-4f24-8177-7aef122666aa", "url": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mcp7x2ti652o"}, {"timestamp": "2026-01-18T21:55:32.031Z", "date_only": false, "value": "2026-01-18T21:55:32.031973Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/captechgroup.com/post/3mcq4l3faax26", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "9d6996bd-654f-4df1-ab67-3b52ed994468", "url": "https://bsky.app/profile/captechgroup.com/post/3mcq4l3faax26"}, {"timestamp": "2026-01-18T22:13:37.061Z", "date_only": false, "value": "2026-01-18T22:13:37.061589Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mcq5lfzuvg2z", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "a6a8fa9a-ba46-40f6-a4f4-af14bf6bbaee", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3mcq5lfzuvg2z"}, {"timestamp": "2026-01-19T02:27:49.204Z", "date_only": false, "value": "2026-01-19T02:27:49.204216Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mcqlrxhzfa2a", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "9a317a6b-58ed-48c3-9016-2ee2998a5c65", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mcqlrxhzfa2a"}, {"timestamp": "2026-01-19T08:18:10.119Z", "date_only": false, "value": "2026-01-19T08:18:10.119139Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mcr7efwj4s2v", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "bfeeade9-8044-4c23-8b02-b352ee1f5785", "url": "https://bsky.app/profile/shiojiri.com/post/3mcr7efwj4s2v"}, {"timestamp": "2026-01-19T09:40:17.173Z", "date_only": false, "value": "2026-01-19T09:40:17.173882Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/osanpo.bsky.social/post/3mcrdxbte2i2e", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "3b847885-35ea-48f9-980d-32b58cbc3e54", "url": "https://bsky.app/profile/osanpo.bsky.social/post/3mcrdxbte2i2e"}, {"timestamp": "2026-01-19T21:22:34.450Z", "date_only": false, "value": "2026-01-19T21:22:34.450255Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mcsl72xph42z", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "7c3a391a-5b10-4f82-9318-91917dc1b780", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3mcsl72xph42z"}, {"timestamp": "2026-01-21T02:27:31.486Z", "date_only": false, "value": "2026-01-21T02:27:31.486999Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mcvmpbrrar2g", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "cfbec0aa-b7c0-4470-b6fe-3f76a3380117", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mcvmpbrrar2g"}, {"timestamp": "2026-01-21T23:38:08.738Z", "date_only": false, "value": "2026-01-21T23:38:08.738192Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mcxtpcegck25", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "b9c46300-c780-4a90-aba9-61dc9fb11518", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mcxtpcegck25"}, {"timestamp": "2026-01-22T02:27:43.996Z", "date_only": false, "value": "2026-01-22T02:27:43.996112Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mcy56l7tk42l", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "39e27f28-5a63-4c3b-ae82-18b962924a5a", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mcy56l7tk42l"}, {"timestamp": "2026-01-23T14:25:00Z", "date_only": false, "value": "2026-01-23T14:25:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cert.se/2026/01/cert-se-veckobrev-v4.html", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "816490fb-08bb-4e9c-bb2d-b53fcfe67b90", "url": "https://www.cert.se/2026/01/cert-se-veckobrev-v4.html"}, {"timestamp": "2026-01-27T10:24:46.533Z", "date_only": false, "value": "2026-01-27T10:24:46.533475Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/kaito834/statuses/115966573686417304", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "dcb8a97e-79c7-4ea4-b237-3428246aff27", "url": "https://infosec.exchange/users/kaito834/statuses/115966573686417304"}, {"timestamp": "2026-01-31T10:18:31.094Z", "date_only": false, "value": "2026-01-31T10:18:31.094427Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mdplolmzpc2s", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "24213ae7-68f9-4b4a-bc4f-15e96293f261", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mdplolmzpc2s"}, {"timestamp": "2026-02-02T12:25:39Z", "date_only": false, "value": "2026-02-02T12:25:39+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2025-20393", "field": "timestamps.recorded_at", "uuid": "b7d02c20-138f-45e3-92e6-5626f37c19f7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-02T12:25:44.087Z", "date_only": false, "value": "2026-02-02T12:25:44.087487Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b7d02c20-138f-45e3-92e6-5626f37c19f7", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "f6596c48-095e-4319-a604-003b18c0c0e6", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b7d02c20-138f-45e3-92e6-5626f37c19f7"}, {"timestamp": "2026-02-06T17:52:20.320Z", "date_only": false, "value": "2026-02-06T17:52:20.320169Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3me7htpiwjy2x", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "0e90e07e-31d9-470f-b0ae-c91191fcf88c", "url": "https://bsky.app/profile/buherator.bsky.social/post/3me7htpiwjy2x"}, {"timestamp": "2026-02-15T00:53:03.296Z", "date_only": false, "value": "2026-02-15T00:53:03.296140Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3meud3dma4c2w", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "815b9b24-5aa8-491a-9ea4-f0037f4e8fa7", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3meud3dma4c2w"}, {"timestamp": "2026-03-04T01:42:47.334Z", "date_only": false, "value": "2026-03-04T01:42:47.334194Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/5922972", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "92fbf831-3e81-44eb-9f58-0d11d0502dd8", "url": "https://feedsin.space/feed/CISAKevBot/items/5922972"}, {"timestamp": "2026-03-19T20:07:34.846Z", "date_only": false, "value": "2026-03-19T20:07:34.846258Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mhgsjbx45222", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "c315c923-d390-43c3-8dbe-bfd421d9a052", "url": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mhgsjbx45222"}, {"timestamp": "2026-04-22T12:37:07.052Z", "date_only": false, "value": "2026-04-22T12:37:07.052491Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mk3j742gxj23", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "54f64a93-6c91-4c96-bbe1-67b80a5fbb14", "url": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mk3j742gxj23"}, {"timestamp": "2026-06-01T10:46:29Z", "date_only": false, "value": "2026-06-01T10:46:29+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2025-20393", "field": "timestamps.asserted_at", "uuid": "1cd5e125-b622-4d6b-b868-0fb907fdcdcf", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T10:46:29Z", "date_only": false, "value": "2026-06-01T10:46:29+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2025-20393", "field": "timestamps.first_seen_at", "uuid": "1cd5e125-b622-4d6b-b868-0fb907fdcdcf", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T10:46:29Z", "date_only": false, "value": "2026-06-01T10:46:29+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2025-20393", "field": "status.status_updated_at", "uuid": "1cd5e125-b622-4d6b-b868-0fb907fdcdcf", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T10:46:29.170Z", "date_only": false, "value": "2026-06-01T10:46:29.170Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2025-20393", "field": "evidence.0.details.added_date", "uuid": "1cd5e125-b622-4d6b-b868-0fb907fdcdcf", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-17T08:41:39.983Z", "date_only": false, "value": "2026-06-17T08:41:39.983", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-20393", "record": "FKIE_CVE-2025-20393", "field": "lastModified"}, {"timestamp": "2026-06-19T12:45:20.554Z", "date_only": false, "value": "2026-06-19T12:45:20.554940Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/126613d0-6203-4cb5-b2f5-26723b42dd86", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "cfd2b55d-15d9-40fa-9e55-e50497b817d0", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/126613d0-6203-4cb5-b2f5-26723b42dd86"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2025-20393", "field": "timestamps.recorded_at", "uuid": "1cd5e125-b622-4d6b-b868-0fb907fdcdcf", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:03:46.279Z", "date_only": false, "value": "2026-06-23T14:03:46.279845Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1cd5e125-b622-4d6b-b868-0fb907fdcdcf", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "047309f0-a7b1-4da7-9ff6-cb9e972609fa", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1cd5e125-b622-4d6b-b868-0fb907fdcdcf"}, {"timestamp": "2026-08-14T16:00:04.587Z", "date_only": false, "value": "2026-08-14T16:00:04.587163Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/purp_sec/1352", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "cb8947cd-7792-400d-918a-0b5f107ad900", "content": "\u2705  Cisco: Zero-Day \u0432 Secure Email Gateway (CVE-2025-20393, CVSS 10.0)\n\nCisco \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0448\u043b\u044e\u0437\u0430\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Secure Email Gateway (ESA) \u0438 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430\u0445 Secure Email and Web Manager (SMA), \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u043d\u0430 AsyncOS. \u0411\u0430\u0433 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u043e\u0439 UAT-9686 (Velvet Ant) \u0434\u043b\u044f \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043b\u0430\u0441\u0441\u0430 Improper Input Validation \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Spam Quarantine. \u0415\u0441\u043b\u0438 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u043a\u0430\u0440\u0430\u043d\u0442\u0438\u043d\u0430 (\u043e\u0431\u044b\u0447\u043d\u043e TCP/83) \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0438\u0437 \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0439 \u0441\u0435\u0442\u0438, \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u043a\u043e\u043c\u0430\u043d\u0434.\n\n\u041a\u0430\u043a \u0438\u0442\u043e\u0433 \u2014 \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 root, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c, \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0435 \u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0448\u043b\u044e\u0437\u0430 \u043a\u0430\u043a \u043f\u0440\u043e\u043a\u0441\u0438 \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0439 \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440.\n\n\u0413\u0440\u0443\u043f\u043f\u0430 UAT-9686 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u0435\u0442 \u043d\u0430 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0445\u043e\u0441\u0442\u0430\u0445 \u0441\u043b\u043e\u0436\u043d\u044b\u0439 \u043c\u043e\u0434\u0443\u043b\u044c\u043d\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439, \u0447\u0442\u043e\u0431\u044b \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435:\n\n\ud83d\udd35 AquaShell \u2014 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432\u044b\u0439 Python-\u0431\u044d\u043a\u0434\u043e\u0440 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\ud83d\udd35AquaTunnel (\u043d\u0430 \u0431\u0430\u0437\u0435 ReverseSSH) \u0438 Chisel \u2014 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u043a\u0440\u044b\u0442\u044b\u0445 \u0442\u0443\u043d\u043d\u0435\u043b\u0435\u0439 \u0438 \u043e\u0431\u0445\u043e\u0434\u0430 NAT.\n\ud83d\udd35 AquaPurge \u2014 \u0443\u0442\u0438\u043b\u0438\u0442\u0430 \u0434\u043b\u044f \u0437\u0430\u0447\u0438\u0441\u0442\u043a\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u043b\u043e\u0433\u043e\u0432 \u0438 \u0441\u043e\u043a\u0440\u044b\u0442\u0438\u044f \u0444\u0430\u043a\u0442\u0430 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438.\n\n\u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c\n\n\u27a1\ufe0f \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f AsyncOS, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\n\n\u27a1\ufe0f \u041d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0437\u0430\u043a\u0440\u043e\u0439\u0442\u0435 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 Spam Quarantine (TCP 80/443/83) \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u043e\u0432.\n\n\u27a1\ufe0f \u0414\u043b\u044f \u0443\u0436\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043f\u0440\u043e\u0441\u0442\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e. \u0411\u044d\u043a\u0434\u043e\u0440\u044b \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u044e\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0440\u0430\u0437\u0434\u0435\u043b\u044b, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u2014 \u043f\u043e\u043b\u043d\u044b\u0439 re-image \u0438 \u0441\u043c\u0435\u043d\u0430 \u0432\u0441\u0435\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n#blue_team #Cisco #ZeroDay #RCE #UAT9686", "url": "https://t.me/purp_sec/1352"}, {"timestamp": "2026-08-19T21:00:06.357Z", "date_only": false, "value": "2026-08-19T21:00:06.357672Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberDispatch/320", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "ec6f4501-d479-4fbb-b700-e09134777b84", "content": "CVE-2025-20393 is rated 10.0, with no patch available.\n\nCisco confirmed active exploitation of an AsyncOS zero-day by a China-linked APT.", "url": "https://t.me/CyberDispatch/320"}, {"timestamp": "2026-08-19T21:00:06.543Z", "date_only": false, "value": "2026-08-19T21:00:06.543990Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberDispatch/310", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "c0d82c8c-e551-470b-803a-613c6e14823f", "content": "CISA has added 3 vulnerabilities to the KEV Catalog\n\nCVE-2025-59374: ASUS Live Update Embedded Malicious Code Vulnerability\n\nCVE-2025-40602: SonicWall SMA1000 Missing Authorization Vulnerability\n\nCVE-2025-20393: Cisco Multiple Products Improper Input Validation Vulnerability", "url": "https://t.me/CyberDispatch/310"}, {"timestamp": "2026-09-01T17:00:12.783Z", "date_only": false, "value": "2026-09-01T17:00:12.783859Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/7849", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "fd31fb8e-5d08-43a3-9a71-2b463541b80a", "content": "1. WARNING: CVE-2025-20393 is rated 10.0, with no patch available.\n\nCisco confirmed active exploitation of an AsyncOS zero-day by a China-linked APT. The flaw allows root-level command execution on affected email security appliances and enables attackers to establish persistence.\nDetails and mitigations:\n https://lnkd.in/dKZ5aRc2\n\n2. A critical ASUS Live Update vulnerability is now on CISA\u2019s exploited list.\n\nCVSS 9.3, supply chain based, and tied to ShadowHammer, it embedded malicious code in signed updates for carefully chosen devices.\nhttps://lnkd.in/dzW-DxTC\n\n3. HPE patched a CRITICAL CVSS 10.0 flaw in OneView that allows unauthenticated remote code execution.\n\nAll versions before 11.00 are affected, with hotfixes for 5.20\u201310.20.No active exploits reported, but patching is urgent. Details here\n https://lnkd.in/ddGsRZtm\n\n\u2014 CISO as a Service \u2014\n| Strategic Cyber Defense & GRC\nResilient Through Knowledge\n2025.12.19\n\nhttps://www.linkedin.com/posts/alirezaghahrood_cisco-warns-of-active-attacks-exploiting-activity-7407599988215635968-3iGW", "url": "https://t.me/cissp/7849"}, {"timestamp": "2026-09-01T20:00:14.748Z", "date_only": false, "value": "2026-09-01T20:00:14.748391Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/176170", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "3d207c37-1bcf-4f1e-8c0a-906cd802efc2", "content": "CVE-2025\u201320393 (Cisco AsyncOS Zero-Day)\nhttps://cyberleelawat.medium.com/cve-2025-20393-cisco-asyncos-zero-day-72b35798cdf9?source=rss------bug_bounty-5", "url": "https://t.me/hacking_Attack/176170"}, {"timestamp": "2026-09-01T20:00:14.798Z", "date_only": false, "value": "2026-09-01T20:00:14.798022Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/176172", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "0e1bea01-ade6-4628-8e8c-5f1436203c41", "content": "Origination:- Cyber LeelawatContinue reading on Medium \u00bb (https://cyberleelawat.medium.com/cve-2025-20393-cisco-asyncos-zero-day-72b35798cdf9?source=rss------bug_bounty-5)", "url": "https://t.me/hacking_Attack/176172"}, {"timestamp": "2026-09-03T02:00:04.425Z", "date_only": false, "value": "2026-09-03T02:00:04.425998Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/176172", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "87dab1cd-7361-4b3f-bef8-2a41fcf9c04e", "content": "Origination:- Cyber LeelawatContinue reading on Medium \u00bb (https://cyberleelawat.medium.com/cve-2025-20393-cisco-asyncos-zero-day-72b35798cdf9?source=rss------bug_bounty-5)", "url": "https://t.me/hacking_Attack/176172"}, {"timestamp": "2026-09-03T02:00:04.482Z", "date_only": false, "value": "2026-09-03T02:00:04.482741Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/176170", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "17d16e04-d8b0-4a41-9b0b-051b54f86b90", "content": "CVE-2025\u201320393 (Cisco AsyncOS Zero-Day)\nhttps://cyberleelawat.medium.com/cve-2025-20393-cisco-asyncos-zero-day-72b35798cdf9?source=rss------bug_bounty-5", "url": "https://t.me/hacking_Attack/176170"}, {"timestamp": "2026-09-09T03:00:06.866Z", "date_only": false, "value": "2026-09-09T03:00:06.866941Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cissp/7849", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "304e8088-5b78-4238-a39a-5550c02dd3d1", "content": "1. WARNING: CVE-2025-20393 is rated 10.0, with no patch available.\n\nCisco confirmed active exploitation of an AsyncOS zero-day by a China-linked APT. The flaw allows root-level command execution on affected email security appliances and enables attackers to establish persistence.\nDetails and mitigations:\n https://lnkd.in/dKZ5aRc2\n\n2. A critical ASUS Live Update vulnerability is now on CISA\u2019s exploited list.\n\nCVSS 9.3, supply chain based, and tied to ShadowHammer, it embedded malicious code in signed updates for carefully chosen devices.\nhttps://lnkd.in/dzW-DxTC\n\n3. HPE patched a CRITICAL CVSS 10.0 flaw in OneView that allows unauthenticated remote code execution.\n\nAll versions before 11.00 are affected, with hotfixes for 5.20\u201310.20.No active exploits reported, but patching is urgent. Details here\n https://lnkd.in/ddGsRZtm\n\n\u2014 CISO as a Service \u2014\n| Strategic Cyber Defense & GRC\nResilient Through Knowledge\n2025.12.19\n\nhttps://www.linkedin.com/posts/alirezaghahrood_cisco-warns-of-active-attacks-exploiting-activity-7407599988215635968-3iGW", "url": "https://t.me/cissp/7849"}, {"timestamp": "2026-09-22T16:22:56Z", "date_only": false, "value": "2026-09-22T16:22:56.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/NO7Zgp_3_JUnGge-0R2yQlJMYQuvEl233fkq02E-_ZM3RDI", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "f9eb30f1-3193-4afd-91e6-f4c9def5f44b"}, {"timestamp": "2026-09-25T09:22:03Z", "date_only": false, "value": "2026-09-25T09:22:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/SE-ED8clfuYFPrVIIQF56_iumtktt8NQqR_DFzQTtyXE1m4", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "13dfc985-d6ad-4218-aa38-f5d01371f7e0"}, {"timestamp": "2026-09-25T09:22:03Z", "date_only": false, "value": "2026-09-25T09:22:03.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/SE-ED8clfuYFPrVIIQF56_iumtktt8NQqR_DFzQTtyXE1m4", "record": "CVE-2025-20393", "field": "creation_timestamp", "uuid": "c9032204-8c7f-4b34-9625-ccfced8cd7ba"}, {"timestamp": "2026-10-07T19:22:07.139Z", "date_only": false, "value": "2026-10-07T19:22:07.139Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-20393", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-07T19:22:07.139Z", "date_only": false, "value": "2026-10-07T19:22:07.139Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-20393", "field": "containers.adp.0.providerMetadata.dateUpdated"}]}