IOC Radar
CVEHighVerifiedSignal 61/100EPSS 54.8%

CVE-2026-20127

First Seen
Jun 3, 2026
Last Seen
Jun 25, 2026
Jun 3
First Seen
22d ago
Jun 25
Last Seen
today
4
Reports
source reports
76%
Confidence
high
Found in 4 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
CVE
Known vulnerability being actively exploited in the wild.
MISP Category
vulnerability
EPSS Score
54.80%
EPSS Percentile
98.1th
Confidence
76%
Signal Score
61 / 100
IDS Rule
No
CVE Intelligence
Exploit Probability54.80%
98.1th percentile of all CVEs
Threat Context
Malware Families2
CCobalt StrikeMMetasploit
Tags

Feed Intelligence Summary

4 reports76% confidence
CP
Cyber Press
Today
Cisco Catalyst SD-WAN Manager Zero-Day Exploited to Gain Root Access
11 IOCs in report
HA
HawkEye
6d ago
Weekly Threat Landscape Digest – Week 25
45 IOCs in report
SP
SOC Prime
Jun 5, 2026
CVE-2026-20245: Cisco SD-WAN Manager Zero-Day Enables Root Command Execution
4 IOCs in report
RF
Recorded Future Blog
Mar 12, 2026
February 2026 CVE Landscape: 13 Critical Vulnerabilities Mark 43% Drop from January
22 IOCs in report

Activity Timeline

4 total obs
Jun 25Mar 12

Threat Activity Heatmap

· Peak: 2026-03-12
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
1
Minimal
7d
2
Minimal
30d
3
Moderate
3mo
3
Moderate
Threat ScoreMedium Risk
61
SIGNAL
Signal Score
76%
Confidence
4
Reports
First seenJun 3, 2026
Last seenJun 25, 2026
Verified IOC

VirusTotal

Not checked

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

high
First detected 22 days ago · Last seen today
Appeared in 4 threat reports from 4 sources
Associated with: UNC6395, APT28, UNC6201
Used by malware: Cobalt Strike, Metasploit