IOC Radar
CVEHighVerifiedSignal 69/100EPSS 80.5%

CVE-2026-20182

First Seen
Jun 2, 2026
Last Seen
Jun 25, 2026
Jun 2
First Seen
23d ago
Jun 25
Last Seen
yesterday
6
Reports
source reports
81%
Confidence
high
Found in 6 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
CVE
Known vulnerability being actively exploited in the wild.
MISP Category
vulnerability
EPSS Score
80.54%
EPSS Percentile
99.2th
Confidence
81%
Signal Score
69 / 100
IDS Rule
No
CVE Intelligence
Exploit Probability80.54%
99.2th percentile of all CVEs
Threat Context
Tags

Feed Intelligence Summary

6 reports81% confidence
CP
Cyber Press
Yesterday
Cisco Catalyst SD-WAN Manager Zero-Day Exploited to Gain Root Access
11 IOCs in report
HA
HawkEye
Jun 19, 2026
Weekly Threat Landscape Digest – Week 25
45 IOCs in report
RF
Recorded Future Blog
Jun 8, 2026
May 2026 CVE Landscape
24 IOCs in report
SP
SOC Prime
Jun 5, 2026
CVE-2026-20245: Cisco SD-WAN Manager Zero-Day Enables Root Command Execution
4 IOCs in report
SP
SOC Prime
May 15, 2026
CVE-2026-20182: Critical Authentication Bypass in Cisco SD-WAN Can Grant Admin Access
1 IOC in report
HA
HawkEye
May 15, 2026
Weekly Threat Landscape Digest – Week 20
56 IOCs in report

Activity Timeline

6 total obs
Jun 25May 15

Threat Activity Heatmap

· Peak: 2026-05-15
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
0
Dormant
7d
1
Minimal
30d
4
Moderate
3mo
6
Moderate
Threat ScoreMedium Risk
69
SIGNAL
Signal Score
81%
Confidence
6
Reports
First seenJun 2, 2026
Last seenJun 25, 2026
Verified IOC

VirusTotal

Not checked

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

high
First detected 23 days ago · Last seen 1 day ago
Appeared in 6 threat reports from 6 sources
Associated with: UNC6395, APT44, Sandworm
Used by malware: WannaCry, Mirai, Metasploit, Gh0st RAT