{"schema":"vulnpedia.research/1","cve":"CVE-2026-20127","references":[{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa-EHchtZk","tags":["Vendor Advisory","KEV report"],"source":"mitre","sourceId":"cisco","modified":"2026-06-16T17:57:59.054Z","origins":[{"source":"mitre","sourceId":"cisco","modified":"2026-06-16T17:57:59.054Z","url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa-EHchtZk"},{"source":"nvd","sourceId":"CVE-2026-20127","modified":"2026-06-17T15:06:12.607","url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa-EHchtZk"},{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","modified":"2026-02-25T00:00:00Z","url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa-EHchtZk"}]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20127","tags":["government-resource","US Government Resource"],"source":"mitre","sourceId":"CISA-ADP","modified":"2026-02-26T14:44:06.050Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-02-26T14:44:06.050Z","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20127"},{"source":"nvd","sourceId":"CVE-2026-20127","modified":"2026-06-17T15:06:12.607","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-20127"}]},{"source":"euvd","sourceId":"EUVD-2026-8675","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-8675","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-8675","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-8675"}]},{"url":"https://vulncheck.com/kev","tags":["ADVISORY"],"source":"vulncheck-kev","sourceId":"CVE-2026-20127","modified":"2026-02-25T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","modified":"2026-02-25T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"url":"https://blog.talosintelligence.com/uat-8616-sd-wan/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-20127","modified":"2026-02-25T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","modified":"2026-02-25T00:00:00Z","url":"https://blog.talosintelligence.com/uat-8616-sd-wan/"}]},{"url":"https://media.defense.gov/2026/Feb/25/2003880301/-1/-1/0/CSA_Exploitation_of_SD-WAN_Appliances.PDF","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-20127","modified":"2026-02-25T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","modified":"2026-02-25T00:00:00Z","url":"https://media.defense.gov/2026/Feb/25/2003880301/-1/-1/0/CSA_Exploitation_of_SD-WAN_Appliances.PDF"}]},{"url":"https://www.cisa.gov/news-events/directives/ed-26-03-mitigate-vulnerabilities-cisco-sd-wan-systems","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-20127","modified":"2026-02-25T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","modified":"2026-02-25T00:00:00Z","url":"https://www.cisa.gov/news-events/directives/ed-26-03-mitigate-vulnerabilities-cisco-sd-wan-systems"}]},{"url":"https://www.cisa.gov/news-events/directives/supplemental-direction-ed-26-03-hunt-and-hardening-guidance-cisco-sd-wan-systems","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-20127","modified":"2026-02-25T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","modified":"2026-02-25T00:00:00Z","url":"https://www.cisa.gov/news-events/directives/supplemental-direction-ed-26-03-hunt-and-hardening-guidance-cisco-sd-wan-systems"}]},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-20127","modified":"2026-02-25T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","modified":"2026-02-25T00:00:00Z","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"url":"https://x.com/ethicalhack3r/status/2029244376908435492","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-20127","modified":"2026-02-25T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","modified":"2026-02-25T00:00:00Z","url":"https://x.com/ethicalhack3r/status/2029244376908435492"}]},{"url":"https://x.com/SimoKohonen/status/2029483790909702425","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-20127","modified":"2026-02-25T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","modified":"2026-02-25T00:00:00Z","url":"https://x.com/SimoKohonen/status/2029483790909702425"}]},{"url":"https://tracker.crowdsec.net/cves/CVE-2026-20127","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-20127","modified":"2026-02-25T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","modified":"2026-02-25T00:00:00Z","url":"https://tracker.crowdsec.net/cves/CVE-2026-20127"}]},{"url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-20127&date=2026-03-09","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-20127","modified":"2026-02-25T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","modified":"2026-02-25T00:00:00Z","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-20127&date=2026-03-09"}]},{"url":"https://asec.ahnlab.com/en/92906/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-20127","modified":"2026-02-25T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","modified":"2026-02-25T00:00:00Z","url":"https://asec.ahnlab.com/en/92906/"}]},{"url":"https://www.recordedfuture.com/blog/february-2026-cve-landscape","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-20127","modified":"2026-02-25T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","modified":"2026-02-25T00:00:00Z","url":"https://www.recordedfuture.com/blog/february-2026-cve-landscape"}]},{"url":"https://www.intel471.com/blog/cve-2026-20127-critical-cisco-sd-wan-vulnerability-exploited-in-wild","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-20127","modified":"2026-02-25T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","modified":"2026-02-25T00:00:00Z","url":"https://www.intel471.com/blog/cve-2026-20127-critical-cisco-sd-wan-vulnerability-exploited-in-wild"}]},{"url":"https://fortiguard.fortinet.com/outbreak-alert/iran-linked-cyber-attacks","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-20127","modified":"2026-02-25T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","modified":"2026-02-25T00:00:00Z","url":"https://fortiguard.fortinet.com/outbreak-alert/iran-linked-cyber-attacks"}]},{"url":"https://blog.talosintelligence.com/sd-wan-ongoing-exploitation/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-20127","modified":"2026-02-25T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","modified":"2026-02-25T00:00:00Z","url":"https://blog.talosintelligence.com/sd-wan-ongoing-exploitation/"}]},{"url":"https://www.rapid7.com/blog/post/ve-cve-2026-20182-critical-authentication-bypass-cisco-catalyst-sd-wan-controller-fixed/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-20127","modified":"2026-02-25T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","modified":"2026-02-25T00:00:00Z","url":"https://www.rapid7.com/blog/post/ve-cve-2026-20182-critical-authentication-bypass-cisco-catalyst-sd-wan-controller-fixed/"}]},{"url":"https://hs-24091716.f.hubspotemail.net/hubfs/24091716/UltraViolet-2026-TIDE-Q2-Threat-Review-1.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-20127","modified":"2026-02-25T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","modified":"2026-02-25T00:00:00Z","url":"https://hs-24091716.f.hubspotemail.net/hubfs/24091716/UltraViolet-2026-TIDE-Q2-Threat-Review-1.pdf"}]},{"url":"https://cyble.com/reports/H1-2026-Global-Threat-Landscape-Report.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-20127","modified":"2026-02-25T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","modified":"2026-02-25T00:00:00Z","url":"https://cyble.com/reports/H1-2026-Global-Threat-Landscape-Report.pdf"}]},{"url":"https://vulncheck.com/xdb/53b5f3567623","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"53b5f3567623","modified":"2026-02-25T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"53b5f3567623","modified":"2026-02-25T00:00:00Z","url":"https://vulncheck.com/xdb/53b5f3567623"}]},{"url":"https://github.com/sfewer-r7/CVE-2026-20127","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"53b5f3567623","modified":"2026-02-25T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"53b5f3567623","modified":"2026-02-25T00:00:00Z","url":"https://github.com/sfewer-r7/CVE-2026-20127"}]},{"url":"https://vulncheck.com/xdb/da2efec40490","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"da2efec40490","modified":"2026-02-25T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"da2efec40490","modified":"2026-02-25T00:00:00Z","url":"https://vulncheck.com/xdb/da2efec40490"}]},{"url":"https://github.com/flyawaytang/CVE-2026-20127","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"da2efec40490","modified":"2026-02-25T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"da2efec40490","modified":"2026-02-25T00:00:00Z","url":"https://github.com/flyawaytang/CVE-2026-20127"}]},{"url":"https://vulncheck.com/xdb/f430ad0dac3a","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"f430ad0dac3a","modified":"2026-02-25T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"f430ad0dac3a","modified":"2026-02-25T00:00:00Z","url":"https://vulncheck.com/xdb/f430ad0dac3a"}]},{"url":"https://github.com/anuththara2007-W/CVE-2026-20127-Exploit-Extension","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"f430ad0dac3a","modified":"2026-02-25T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"f430ad0dac3a","modified":"2026-02-25T00:00:00Z","url":"https://github.com/anuththara2007-W/CVE-2026-20127-Exploit-Extension"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/zerozenxlabs/CVE-2026-20127---Cisco-SD-WAN-Preauth-RCE","source":"poc-in-github","sourceId":"CVE-2026-20127","modified":"2026-10-19T16:35:36Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-20127","url":"https://github.com/zerozenxlabs/CVE-2026-20127---Cisco-SD-WAN-Preauth-RCE"},{"source":"poc-in-github","sourceId":"CVE-2026-20127","modified":"2026-10-19T16:35:36Z","url":"https://github.com/zerozenxlabs/CVE-2026-20127---Cisco-SD-WAN-Preauth-RCE"}],"tags":[]},{"url":"https://github.com/randeepajayasekara/CVE-2026-20127","source":"poc-in-github","sourceId":"CVE-2026-20127","description":"Walkthrough of the CVSS 10.0 authentication bypass in Cisco Catalyst SD-WAN from first malformed peering request to root on the management plane.","modified":"2026-03-12T06:34:04Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-20127","url":"https://github.com/randeepajayasekara/CVE-2026-20127"},{"source":"poc-in-github","sourceId":"CVE-2026-20127","modified":"2026-03-12T06:34:04Z","url":"https://github.com/randeepajayasekara/CVE-2026-20127"}],"tags":[]},{"url":"https://github.com/BugFor-Pings/CVE-2026-20127_EXP","source":"poc-in-github","sourceId":"CVE-2026-20127","description":"Cisco Catalyst SD-WAN 身份验证绕过漏洞(CVE-2026-20127)利用EXP","modified":"2026-03-31T13:50:52Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-20127","url":"https://github.com/BugFor-Pings/CVE-2026-20127_EXP"},{"source":"poc-in-github","sourceId":"CVE-2026-20127","modified":"2026-03-31T13:50:52Z","url":"https://github.com/BugFor-Pings/CVE-2026-20127_EXP"}],"tags":[]},{"url":"https://github.com/yonathanpy/CVE-2026-20127-Cisco-SD-WAN-Preauth-RCE","source":"poc-in-github","sourceId":"CVE-2026-20127","modified":"2026-03-19T16:14:54Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-20127","url":"https://github.com/yonathanpy/CVE-2026-20127-Cisco-SD-WAN-Preauth-RCE"},{"source":"poc-in-github","sourceId":"CVE-2026-20127","modified":"2026-03-19T16:14:54Z","url":"https://github.com/yonathanpy/CVE-2026-20127-Cisco-SD-WAN-Preauth-RCE"}],"tags":[]},{"url":"https://github.com/abrahamsurf/sdwan-scanner-CVE-2026-20127","source":"poc-in-github","sourceId":"CVE-2026-20127","description":"Cisco SD-WAN Exposure & Potential Vulnerability Scanner (Passive Fingerprinting) 2026","modified":"2026-03-08T09:24:09Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-20127","url":"https://github.com/abrahamsurf/sdwan-scanner-CVE-2026-20127"},{"source":"poc-in-github","sourceId":"CVE-2026-20127","modified":"2026-03-08T09:24:09Z","url":"https://github.com/abrahamsurf/sdwan-scanner-CVE-2026-20127"}],"tags":[]},{"url":"https://github.com/sfewer-r7/CVE-2026-20127","source":"poc-in-github","sourceId":"CVE-2026-20127","description":"An exploit for the Cisco Catalyst SD-WAN Controller authentication bypass vulnerability, CVE-2026-20127","modified":"2026-06-16T17:07:22Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-20127","url":"https://github.com/sfewer-r7/CVE-2026-20127"},{"source":"poc-in-github","sourceId":"CVE-2026-20127","modified":"2026-06-16T17:07:22Z","url":"https://github.com/sfewer-r7/CVE-2026-20127"}],"tags":[]},{"url":"https://github.com/gigachadusers/cve-2026-20127","source":"poc-in-github","sourceId":"CVE-2026-20127","modified":"2026-05-31T19:28:07Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-20127","url":"https://github.com/gigachadusers/cve-2026-20127"},{"source":"poc-in-github","sourceId":"CVE-2026-20127","modified":"2026-05-31T19:28:07Z","url":"https://github.com/gigachadusers/cve-2026-20127"}],"tags":[]},{"url":"https://github.com/0xBlackash/CVE-2026-20127","source":"poc-in-github","sourceId":"CVE-2026-20127","description":"CVE-2026-20127","modified":"2026-06-14T13:35:35Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-20127","url":"https://github.com/0xBlackash/CVE-2026-20127"},{"source":"poc-in-github","sourceId":"CVE-2026-20127","modified":"2026-06-14T13:35:35Z","url":"https://github.com/0xBlackash/CVE-2026-20127"}],"tags":[]},{"url":"https://github.com/anuththara2007-W/CVE-2026-20127-Exploit-Extension","source":"poc-in-github","sourceId":"CVE-2026-20127","modified":"2026-07-12T04:28:40Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-20127","url":"https://github.com/anuththara2007-W/CVE-2026-20127-Exploit-Extension"},{"source":"poc-in-github","sourceId":"CVE-2026-20127","modified":"2026-07-12T04:28:40Z","url":"https://github.com/anuththara2007-W/CVE-2026-20127-Exploit-Extension"}],"tags":[]}],"cataloguedPoc":[{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"53b5f3567623","url":"https://vulncheck.com/xdb/53b5f3567623","cve":"CVE-2026-20127","dateAdded":"2026-03-11T20:51:00Z","modified":"2026-02-25T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/sfewer-r7/CVE-2026-20127","observations":[{"dateAdded":"2026-03-11T20:51:00Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"53b5f3567623","modified":"2026-02-25T00:00:00Z","url":"https://vulncheck.com/xdb/53b5f3567623"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"da2efec40490","url":"https://vulncheck.com/xdb/da2efec40490","cve":"CVE-2026-20127","dateAdded":"2026-05-19T14:52:48Z","modified":"2026-02-25T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/flyawaytang/CVE-2026-20127","observations":[{"dateAdded":"2026-05-19T14:52:48Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"da2efec40490","modified":"2026-02-25T00:00:00Z","url":"https://vulncheck.com/xdb/da2efec40490"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"f430ad0dac3a","url":"https://vulncheck.com/xdb/f430ad0dac3a","cve":"CVE-2026-20127","dateAdded":"2026-07-14T17:30:36Z","modified":"2026-02-25T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/anuththara2007-W/CVE-2026-20127-Exploit-Extension","observations":[{"dateAdded":"2026-07-14T17:30:36Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"f430ad0dac3a","modified":"2026-02-25T00:00:00Z","url":"https://vulncheck.com/xdb/f430ad0dac3a"}]}],"vendorStatements":[],"exploitationSources":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","catalog":"VulnCheck KEV","kind":"catalogue","url":"https://vulncheck.com/kev","dateAdded":"2026-02-25T00:00:00Z","modified":"2026-02-25T00:00:00Z","requiredAction":"Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.","knownRansomwareCampaignUse":"Unknown","reportedByVulncheckCanaries":true,"vendorProject":"Cisco","product":"Catalyst SD-WAN Controller and Manager","dueDate":"2026-02-27T00:00:00Z","cisaDateAdded":"2026-02-25T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","modified":"2026-02-25T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","catalog":"VulnCheck KEV","kind":"report","url":"https://blog.talosintelligence.com/uat-8616-sd-wan/","dateAdded":"2026-02-25T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","url":"https://blog.talosintelligence.com/uat-8616-sd-wan/"},{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","url":"https://media.defense.gov/2026/Feb/25/2003880301/-1/-1/0/CSA_Exploitation_of_SD-WAN_Appliances.PDF"},{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa-EHchtZk"},{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","url":"https://www.cisa.gov/news-events/directives/ed-26-03-mitigate-vulnerabilities-cisco-sd-wan-systems"},{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","url":"https://www.cisa.gov/news-events/directives/supplemental-direction-ed-26-03-hunt-and-hardening-guidance-cisco-sd-wan-systems"},{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","catalog":"VulnCheck KEV","kind":"report","url":"https://x.com/ethicalhack3r/status/2029244376908435492","dateAdded":"2026-03-04T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","url":"https://x.com/ethicalhack3r/status/2029244376908435492"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","catalog":"VulnCheck KEV","kind":"report","url":"https://x.com/SimoKohonen/status/2029483790909702425","dateAdded":"2026-03-05T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","url":"https://x.com/SimoKohonen/status/2029483790909702425"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","catalog":"VulnCheck KEV","kind":"report","url":"https://tracker.crowdsec.net/cves/CVE-2026-20127","dateAdded":"2026-03-06T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","url":"https://tracker.crowdsec.net/cves/CVE-2026-20127"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","catalog":"VulnCheck KEV","kind":"report","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-20127&date=2026-03-09","dateAdded":"2026-03-09T00:00:00Z","firstPartyCanary":true,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","url":"https://api.vulncheck.com/v3/index/vulncheck-canaries?cve=CVE-2026-20127&date=2026-03-09"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","catalog":"VulnCheck KEV","kind":"report","url":"https://asec.ahnlab.com/en/92906/","dateAdded":"2026-03-12T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","url":"https://asec.ahnlab.com/en/92906/"},{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","url":"https://www.recordedfuture.com/blog/february-2026-cve-landscape"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","catalog":"VulnCheck KEV","kind":"report","url":"https://www.intel471.com/blog/cve-2026-20127-critical-cisco-sd-wan-vulnerability-exploited-in-wild","dateAdded":"2026-03-13T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","url":"https://www.intel471.com/blog/cve-2026-20127-critical-cisco-sd-wan-vulnerability-exploited-in-wild"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","catalog":"VulnCheck KEV","kind":"report","url":"https://fortiguard.fortinet.com/outbreak-alert/iran-linked-cyber-attacks","dateAdded":"2026-03-31T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","url":"https://fortiguard.fortinet.com/outbreak-alert/iran-linked-cyber-attacks"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","catalog":"VulnCheck KEV","kind":"report","url":"https://blog.talosintelligence.com/sd-wan-ongoing-exploitation/","dateAdded":"2026-05-14T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","url":"https://blog.talosintelligence.com/sd-wan-ongoing-exploitation/"},{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","url":"https://www.rapid7.com/blog/post/ve-cve-2026-20182-critical-authentication-bypass-cisco-catalyst-sd-wan-controller-fixed/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","catalog":"VulnCheck KEV","kind":"report","url":"https://hs-24091716.f.hubspotemail.net/hubfs/24091716/UltraViolet-2026-TIDE-Q2-Threat-Review-1.pdf","dateAdded":"2026-06-15T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","url":"https://hs-24091716.f.hubspotemail.net/hubfs/24091716/UltraViolet-2026-TIDE-Q2-Threat-Review-1.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","catalog":"VulnCheck KEV","kind":"report","url":"https://cyble.com/reports/H1-2026-Global-Threat-Landscape-Report.pdf","dateAdded":"2026-07-27T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-20127","url":"https://cyble.com/reports/H1-2026-Global-Threat-Landscape-Report.pdf"}]}]}