{"metadata": {"vulnerability": "CVE-2026-20274", "count": 48, "kinds": {"milestone": 8, "sighting": 14, "kev": 0, "other": 26}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0338", "record": "NCSC-2026-0338", "field": "document.tracking.generator.date"}, {"timestamp": "2025-10-08T11:59:15.403Z", "date_only": false, "value": "2025-10-08T11:59:15.403Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-20274", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-02T00:00:00Z", "date_only": true, "value": "2026-09-02", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1110", "record": "CERTFR-2026-AVI-1110", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-09-02T00:00:00Z", "date_only": false, "value": "2026-09-02T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-20274", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-02T00:00:00Z", "date_only": false, "value": "2026-09-02T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-20274", "record": "FKIE_CVE-2026-20274", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-02T15:54:01Z", "date_only": false, "value": "2026-09-02T15:54:01+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-HARDENING-IOSXR-QG64NCM", "record": "CISCO-SA-HARDENING-IOSXR-QG64NCM", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-09-02T16:00:00Z", "date_only": false, "value": "2026-09-02T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-HARDENING-IOSXR-QG64NCM", "record": "CISCO-SA-HARDENING-IOSXR-QG64NCM", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-09-02T16:13:34.649Z", "date_only": false, "value": "2026-09-02T16:13:34.649Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-20274", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-02T16:36:40.758Z", "date_only": false, "value": "2026-09-02T16:36:40.758506Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/AAKL/statuses/117202419724203546", "record": "CVE-2026-20274", "field": "creation_timestamp", "uuid": "824ee8a8-1c90-4140-a670-8ce413b487e4", "content": "New security advisories.\nBroadcom has addressed several vulnerabilities,two of them critical https://support.broadcom.com/web/ecx/security-advisory #Broadcom  \nCisco: Five advisories, two of them addressing critical vulnerabilities:\n- CRITICAL: CVE-2026-20212: Cisco Nexus 9000 Series Switches Silicon One Remote Code Execution Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-n9k-s1-rce-EH8dEtr\n- CRITICAL: CVE-2026-20274, CVE-2026-20275, and CVE-2026-20276: Cisco IOS XR Software Security Hardening Release: September 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxr-qg64NcM\nMore: https://sec.cloudapps.cisco.com/security/center/publicationListing.x @TalosSecurity #Cisco #infosec #vulnerability", "url": "https://infosec.exchange/users/AAKL/statuses/117202419724203546"}, {"timestamp": "2026-09-02T17:17:32Z", "date_only": false, "value": "2026-09-02T17:17:32Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-3M84-XHJG-XC55", "record": "GHSA-3M84-XHJG-XC55", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-02T17:17:32.630Z", "date_only": false, "value": "2026-09-02T17:17:32.630", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-20274", "record": "FKIE_CVE-2026-20274", "field": "published"}, {"timestamp": "2026-09-02T18:07:59.918Z", "date_only": false, "value": "2026-09-02T18:07:59.918611Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mukjp7pzgv22", "record": "CVE-2026-20274", "field": "creation_timestamp", "uuid": "231c7a8f-8de3-4ebf-a941-a2f13fa87129", "content": "\ud83d\udea8 CVE-2026-20274 \u2014 CVSS 9.8 CRITICAL\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-20274\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mukjp7pzgv22"}, {"timestamp": "2026-09-02T18:32:26Z", "date_only": false, "value": "2026-09-02T18:32:26Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-3M84-XHJG-XC55", "record": "GHSA-3M84-XHJG-XC55", "field": "published"}, {"timestamp": "2026-09-02T20:40:07.370Z", "date_only": false, "value": "2026-09-02T20:40:07.370751Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muks76tyxz2o", "record": "CVE-2026-20274", "field": "creation_timestamp", "uuid": "e6df4526-3e1b-4f9a-b6b4-92c14fffbcab", "content": "CVE-2026-20274 - cisco ios xr software\nThe Cisco IOS XR operating system used in many network routers has been updated to fix several internal weaknesses that could let a malicious user consume the device\u2019s memory or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cisco #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3muks76tyxz2o"}, {"timestamp": "2026-09-02T21:01:48.953Z", "date_only": false, "value": "2026-09-02T21:01:48.953359Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3muktfv7msn25", "record": "CVE-2026-20274", "field": "creation_timestamp", "uuid": "31d961c5-ecd8-49c0-ad90-399046dd1e58", "content": "\u88fd\u54c1\u540d\uff1aVLC media player \u8106\u5f31\u6027\uff1a\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u53ef\u80fd\u6027 \u5f71\u97ff\uff1a\u653b\u6483\u8005\u306f\u7d30\u5de5\u3057\u305f\u30e1\u30c7\u30a3\u30a2\u30d5\u30a1\u30a4\u30eb\u3092\u9001\u308a\u3064\u3051\u3001\u4efb\u610f\u30b3\u30fc\u30c9\u5b9f\u884c\u3092\u53ef\u80fd\u306b\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\nCVE-2026-20274 CVSS 9.8 | CRITICAL", "url": "https://bsky.app/profile/postac001.bsky.social/post/3muktfv7msn25"}, {"timestamp": "2026-09-02T21:53:32Z", "date_only": false, "value": "2026-09-02T21:53:32+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-HARDENING-IOSXR-QG64NCM", "record": "CISCO-SA-HARDENING-IOSXR-QG64NCM", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-03T00:00:00Z", "date_only": false, "value": "2026-09-03T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1110", "record": "CERTFR-2026-AVI-1110", "field": "last_revision_date"}, {"timestamp": "2026-09-03T00:00:00Z", "date_only": false, "value": "2026-09-03T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1110", "record": "CERTFR-2026-AVI-1110", "field": "initial_release_date"}, {"timestamp": "2026-09-03T00:00:00Z", "date_only": false, "value": "2026-09-03T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1110", "record": "CERTFR-2026-AVI-1110", "field": "revisions.0.revision_date"}, {"timestamp": "2026-09-03T03:56:33.256Z", "date_only": false, "value": "2026-09-03T03:56:33.256Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-20274", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-03T08:45:26.285Z", "date_only": false, "value": "2026-09-03T08:45:26.285578Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2046", "record": "CVE-2026-20274", "field": "creation_timestamp", "uuid": "6c8476d7-359b-4376-9e74-96c41d4a9b3b", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2046"}, {"timestamp": "2026-09-03T08:45:48.245Z", "date_only": false, "value": "2026-09-03T08:45:48.245391Z", "kind": "sighting", "label": "Seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-24", "record": "CVE-2026-20274", "field": "creation_timestamp", "uuid": "3d9a54d7-4e5b-44dc-8d94-e40914510502", "url": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-24"}, {"timestamp": "2026-09-03T13:09:49.681Z", "date_only": false, "value": "2026-09-03T13:09:49.681702Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0338", "record": "NCSC-2026-0338", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-09-03T13:09:49.681Z", "date_only": false, "value": "2026-09-03T13:09:49.681702Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0338", "record": "NCSC-2026-0338", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-09-03T13:09:49.681Z", "date_only": false, "value": "2026-09-03T13:09:49.681702Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0338", "record": "NCSC-2026-0338", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-03T13:45:12.519Z", "date_only": false, "value": "2026-09-03T13:45:12.519192Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mumlia5fbs2h", "record": "CVE-2026-20274", "field": "creation_timestamp", "uuid": "accce95c-7f54-4493-adb5-1b0dff1188fa", "content": "\ud83d\udd17 CVE : CVE-2026-20212, CVE-2026-20274, CVE-2026-20275, CVE-2026-20276, CVE-2026-20277, CVE-2026-20278, CVE-2026-20279, CVE-2026-20280, CVE-2026-20281", "url": "https://bsky.app/profile/o2cloud.bsky.social/post/3mumlia5fbs2h"}, {"timestamp": "2026-09-03T18:53:30Z", "date_only": false, "value": "2026-09-03T18:53:30+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-HARDENING-IOSXR-QG64NCM", "record": "CISCO-SA-HARDENING-IOSXR-QG64NCM", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-03T19:00:05.569Z", "date_only": false, "value": "2026-09-03T19:00:05.569268Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/8577", "record": "CVE-2026-20274", "field": "creation_timestamp", "uuid": "4e37109c-8e82-49c2-8b0a-5afd6959f46e", "content": "Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0438 \u0434\u0432\u0443\u0445 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Secure Email \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u043e\u0432.\n\n\u041f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 S/MIME \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0445 \u043f\u0438\u0441\u0435\u043c, \u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 IOS XR \u0438 Nexus \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0438 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\nCVE-2026-20354\u00a0\u0438\u00a0CVE-2026-20355 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u0438 Secure/Multipurpose Internet Mail Extensions (S/MIME) \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0443\u0433\u0440\u043e\u0437.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Cisco, \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0438 \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0442\u0440\u0430\u0444\u0438\u043a \u043c\u0435\u0436\u0434\u0443 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u043c\u0438 \u0448\u043b\u044e\u0437\u0430\u043c\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 MitM.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435. \n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Secure Email, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c AsyncOS \u0432\u0435\u0440\u0441\u0438\u0438 16.5.0 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0441 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 S/MIME.\n\nCisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u043e\u0434\u043e\u0432\u0430\u043d\u044b, \u043d\u043e \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u043e\u0434\u043d\u0430\u043a\u043e \u0435\u0439 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 IOS XR \u0438 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 \u0441\u0435\u0440\u0438\u0438 Nexus 9000, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u043b\u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430, \u043e\u0431\u0445\u043e\u0434\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u0442\u0438\u043f\u0430\u043c \u0430\u0442\u0430\u043a.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f IOS XR \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u043e\u0448\u0438\u0431\u043e\u043a, \u0441\u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e \u043a\u043b\u0430\u0441\u0441\u0430\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0441\u0435\u043c\u0438 CVE, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9,8: CVE-2026-20274 \u0438 CVE-2026-20279.\n\n\u041a \u043d\u0438\u043c \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043e\u0448\u0438\u0431\u043a\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0430\u043c\u044f\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e.\n\n\u0412 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 \u0441\u0435\u0440\u0438\u0438 Nexus 9000 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 CVE-2026-20212 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 9,8), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0442\u044c\u0441\u044f \u043a \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e TCP-\u043f\u043e\u0440\u0442\u0430\u043c \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Cisco \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0441\u0435\u0440\u0438\u0439 Desk Phone 9800, IP Phone 7800 \u0438 8800, \u0430 \u0442\u0430\u043a\u0436\u0435 Video Phone 8875, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0443 SIP.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2026-20281, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u044b\u0435 \u043f\u043e\u0442\u043e\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 HTTP-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u0432\u044b\u0437\u044b\u0432\u0430\u0442\u044c DoS.\n\nCisco \u0437\u0430\u0432\u0435\u0440\u044f\u0435\u0442, \u0447\u0442\u043e \u0435\u0439 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. \u041d\u043e \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0438\u043c.", "url": "https://t.me/true_secator/8577"}, {"timestamp": "2026-09-04T14:24:33.914Z", "date_only": false, "value": "2026-09-04T14:24:33.914409Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mup65ivntq27", "record": "CVE-2026-20274", "field": "creation_timestamp", "uuid": "30d03219-032f-40da-a125-607494e994ca", "content": "CVE-2026-20274 is trending. Hype score 30, currently #1 on cvemon.\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review.\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-20274", "url": "https://bsky.app/profile/cvemon.bsky.social/post/3mup65ivntq27"}, {"timestamp": "2026-09-04T18:57:23Z", "date_only": false, "value": "2026-09-04T18:57:23+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-HARDENING-IOSXR-QG64NCM", "record": "CISCO-SA-HARDENING-IOSXR-QG64NCM", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-09-05T16:20:40.383Z", "date_only": false, "value": "2026-09-05T16:20:40.383860Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117219342884656217", "record": "CVE-2026-20274", "field": "creation_timestamp", "uuid": "a1e298ec-be2e-455f-a8e5-f1e862e8e1af", "content": "\ud83d\udcf0 Cisco Patches Three Critical Flaws in IOS XR Network Software\nCisco patches 3 critical (CVSS 9.8) remote code execution vulnerabilities in IOS XR software (CVE-2026-20274, CVE-2026-20279, CVE-2026-20212). No active exploitation known, but immediate patching is urged. #Cisco #CyberSecurity #RCE #Networking\n\ud83d\udd17 https://cyber.netsecops.io/articles/cisco-patches-three-critical-vulnerabilities-in-ios-xr-software/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "url": "https://mastodon.social/ap/users/115426718704364579/statuses/117219342884656217"}, {"timestamp": "2026-09-05T16:20:49.477Z", "date_only": false, "value": "2026-09-05T16:20:49.477434Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3murv4cxd6m2r", "record": "CVE-2026-20274", "field": "creation_timestamp", "uuid": "1726bfa5-df35-4535-8d42-ff7a6fba49fd", "content": "Cisco patches 3 critical (CVSS 9.8) remote code execution vulnerabilities in IOS XR software (CVE-2026-20274, CVE-2026-20279, CVE-2026-20212). No active exploitation known, but immediate patching is urged. #Cisco #CyberSecurity #RCE #Networking\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "url": "https://bsky.app/profile/netsecio.bsky.social/post/3murv4cxd6m2r"}, {"timestamp": "2026-09-05T16:41:01.720Z", "date_only": false, "value": "2026-09-05T16:41:01.720130Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3murwahc4xd2n", "record": "CVE-2026-20274", "field": "creation_timestamp", "uuid": "1016dd98-bc7f-4aa8-a718-573cf581eaae", "content": "Cisco IOS XR: unauthenticated remote compromise (CVE-2026-20274, CVSS 9.8) affects all releases. No workarounds; patch to 26.2.2/26.3.1 or apply SMUs. https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxr-qg64NcM", "url": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3murwahc4xd2n"}, {"timestamp": "2026-09-08T19:19:57Z", "date_only": false, "value": "2026-09-08T19:19:57+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-HARDENING-IOSXR-QG64NCM", "record": "CISCO-SA-HARDENING-IOSXR-QG64NCM", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2026-09-09T16:32:49Z", "date_only": false, "value": "2026-09-09T16:32:49+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-HARDENING-IOSXR-QG64NCM", "record": "CISCO-SA-HARDENING-IOSXR-QG64NCM", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2026-09-10T13:45:12Z", "date_only": false, "value": "2026-09-10T13:45:12+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-HARDENING-IOSXR-QG64NCM", "record": "CISCO-SA-HARDENING-IOSXR-QG64NCM", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2026-09-11T15:53:35Z", "date_only": false, "value": "2026-09-11T15:53:35+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-HARDENING-IOSXR-QG64NCM", "record": "CISCO-SA-HARDENING-IOSXR-QG64NCM", "field": "document.tracking.revision_history.7.date"}, {"timestamp": "2026-09-15T14:55:18Z", "date_only": false, "value": "2026-09-15T14:55:18+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-HARDENING-IOSXR-QG64NCM", "record": "CISCO-SA-HARDENING-IOSXR-QG64NCM", "field": "document.tracking.revision_history.8.date"}, {"timestamp": "2026-09-15T17:03:58.294Z", "date_only": false, "value": "2026-09-15T17:03:58.294Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2026-20274", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-15T18:32:13Z", "date_only": false, "value": "2026-09-15T18:32:13Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-3M84-XHJG-XC55", "record": "GHSA-3M84-XHJG-XC55", "field": "modified"}, {"timestamp": "2026-09-17T04:45:15.218Z", "date_only": false, "value": "2026-09-17T04:45:15.218886Z", "kind": "sighting", "label": "Seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260917", "record": "CVE-2026-20274", "field": "creation_timestamp", "uuid": "2f855192-2606-4de4-9f54-3d295c369cd9", "url": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260917"}, {"timestamp": "2026-09-17T18:03:36.280Z", "date_only": false, "value": "2026-09-17T18:03:36.280", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-20274", "record": "FKIE_CVE-2026-20274", "field": "lastModified"}, {"timestamp": "2026-09-17T21:13:28Z", "date_only": false, "value": "2026-09-17T21:13:28+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-HARDENING-IOSXR-QG64NCM", "record": "CISCO-SA-HARDENING-IOSXR-QG64NCM", "field": "document.tracking.revision_history.9.date"}, {"timestamp": "2026-09-17T21:13:28Z", "date_only": false, "value": "2026-09-17T21:13:28+00:00", "kind": "other", "label": "Updated", "source": "csaf_cisco \u00b7 CISCO-SA-HARDENING-IOSXR-QG64NCM", "record": "CISCO-SA-HARDENING-IOSXR-QG64NCM", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-17T21:13:34Z", "date_only": false, "value": "2026-09-17T21:13:34+00:00", "kind": "other", "label": "Document generated", "source": "csaf_cisco \u00b7 CISCO-SA-HARDENING-IOSXR-QG64NCM", "record": "CISCO-SA-HARDENING-IOSXR-QG64NCM", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-18T12:09:44.118Z", "date_only": false, "value": "2026-09-18T12:09:44.118Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-20274", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-18T12:09:44.118Z", "date_only": false, "value": "2026-09-18T12:09:44.118Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / cisco", "record": "CVE-2026-20274", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-01T13:11:18.707Z", "date_only": false, "value": "2026-10-01T13:11:18.707948Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mwswnecr5c22", "record": "CVE-2026-20274", "field": "creation_timestamp", "uuid": "9a6fe400-0d1f-4113-ab92-d74b2ed31ecd", "content": "\u300cCisco IOS XR\u300d\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8 - \u591a\u6570\u8106\u5f31\u6027\u306b\u5bfe\u51e6\n\nCisco Systems\u306f\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u6a5f\u5668\u5411\u3051OS\u300cCisco IOS XR\u300d\u306b\u304a\u3044\u3066\u3001\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u78ba\u8a8d\u3055\u308c\u305f\u3053\u3068\u3092\u53d7\u3051\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u516c\u958b\u3057\u305f\u3002\n\n\u73fe\u5730\u6642\u95932026\u5e749\u67082\u65e5\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u305f\u3082\u306e\u3002\u540c\u793e\u5185\u90e8\u306e\u8abf\u67fb\u3092\u901a\u3058\u3066\u767a\u898b\u3057\u305f\u8106\u5f31\u6027\u3092\u3001\u7279\u6027\u3054\u3068\u306b7\u30ab\u30c6\u30b4\u30ea\u3078\u5206\u985e\u3002\u305d\u308c\u305e\u308cCVE\u756a\u53f7\u3092\u5272\u308a\u5f53\u3066\u305f\u3002\u7279\u5b9a\u306e\u8a2d\u5b9a\u306b\u4f9d\u5b58\u305b\u305a\u5168\u30ea\u30ea\u30fc\u30b9\u304c\u5f71\u97ff\u3092\u53d7\u3051\u308b\u3068\u3044\u3046\u3002\n\n\u300cCVE-2026-20274\u300d\u306f\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u3084\u30e1\u30e2\u30ea\u306e\u7bc4\u56f2\u5916\u8aad\u307f\u66f8\u304d\u306a\u3069\u3001\u30ea\u30bd\u30fc\u30b9\u7ba1\u7406\u306e\u4e0d\u5099\u306b\u8d77\u56e0\u3002\u4e00\u65b9\u300c...", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mwswnecr5c22"}]}