{"metadata": {"vulnerability": "CVE-2026-20034", "count": 37, "kinds": {"milestone": 9, "sighting": 7, "kev": 0, "other": 21}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0136", "record": "NCSC-2026-0136", "field": "document.tracking.generator.date"}, {"timestamp": "2025-10-08T11:59:15.353Z", "date_only": false, "value": "2025-10-08T11:59:15.353Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-20034", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-05-06T00:00:00Z", "date_only": true, "value": "2026-05-06", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0544", "record": "CERTFR-2026-AVI-0544", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-05-06T00:00:00Z", "date_only": false, "value": "2026-05-06T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-20034", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-05-06T00:00:00Z", "date_only": false, "value": "2026-05-06T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-20034", "record": "FKIE_CVE-2026-20034", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-05-06T15:56:12Z", "date_only": false, "value": "2026-05-06T15:56:12+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-UNITY-RCE-SSRF-HENHUASY", "record": "CISCO-SA-UNITY-RCE-SSRF-HENHUASY", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-05-06T15:56:35Z", "date_only": false, "value": "2026-05-06T15:56:35+00:00", "kind": "other", "label": "Document generated", "source": "csaf_cisco \u00b7 CISCO-SA-UNITY-RCE-SSRF-HENHUASY", "record": "CISCO-SA-UNITY-RCE-SSRF-HENHUASY", "field": "document.tracking.generator.date"}, {"timestamp": "2026-05-06T16:00:00Z", "date_only": false, "value": "2026-05-06T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-UNITY-RCE-SSRF-HENHUASY", "record": "CISCO-SA-UNITY-RCE-SSRF-HENHUASY", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-05-06T16:00:00Z", "date_only": false, "value": "2026-05-06T16:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_cisco \u00b7 CISCO-SA-UNITY-RCE-SSRF-HENHUASY", "record": "CISCO-SA-UNITY-RCE-SSRF-HENHUASY", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-05-06T16:00:00Z", "date_only": false, "value": "2026-05-06T16:00:00+00:00", "kind": "other", "label": "Updated", "source": "csaf_cisco \u00b7 CISCO-SA-UNITY-RCE-SSRF-HENHUASY", "record": "CISCO-SA-UNITY-RCE-SSRF-HENHUASY", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-05-06T16:16:05.322Z", "date_only": false, "value": "2026-05-06T16:16:05.322Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-20034", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-05-06T16:16:05.322Z", "date_only": false, "value": "2026-05-06T16:16:05.322Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / cisco", "record": "CVE-2026-20034", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-06T17:16:20Z", "date_only": false, "value": "2026-05-06T17:16:20Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-WFVP-XW34-RHWQ", "record": "GHSA-WFVP-XW34-RHWQ", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-05-06T17:16:20.093Z", "date_only": false, "value": "2026-05-06T17:16:20.093", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-20034", "record": "FKIE_CVE-2026-20034", "field": "published"}, {"timestamp": "2026-05-06T17:22:16.347Z", "date_only": false, "value": "2026-05-06T17:22:16.347853Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml77nupzno2f", "record": "CVE-2026-20034", "field": "creation_timestamp", "uuid": "2b444b5b-dc72-436b-9137-d67018217b1c", "content": "\ud83d\udfe0 CVE-2026-20034 - High (8.8)\n\nA vulnerability in the web-based management interface of Cisco Unity Connection could allow an au...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-20034/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml77nupzno2f"}, {"timestamp": "2026-05-06T17:23:03.662Z", "date_only": false, "value": "2026-05-06T17:23:03.662648Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml77pbe23t2k", "record": "CVE-2026-20034", "field": "creation_timestamp", "uuid": "fd090e59-773e-4188-af17-42941236fe5c", "content": "\ud83d\udfe0 CVE-2026-20034 - High (8.8)\n\nA vulnerability in the web-based management interface of Cisco Unity Connection could allow an au...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-20034/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml77pbe23t2k"}, {"timestamp": "2026-05-06T18:30:30Z", "date_only": false, "value": "2026-05-06T18:30:30Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-WFVP-XW34-RHWQ", "record": "GHSA-WFVP-XW34-RHWQ", "field": "published"}, {"timestamp": "2026-05-06T18:30:30Z", "date_only": false, "value": "2026-05-06T18:30:30Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-WFVP-XW34-RHWQ", "record": "GHSA-WFVP-XW34-RHWQ", "field": "modified"}, {"timestamp": "2026-05-06T19:30:10.781Z", "date_only": false, "value": "2026-05-06T19:30:10.781070Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3ml7gsmblgz2k", "record": "CVE-2026-20034", "field": "creation_timestamp", "uuid": "9fd74646-39b5-42c8-a9f0-68495fd8eb41", "content": "Cisco Unity Connection\u306eWeb\u7ba1\u7406\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30fc\u30b9\u306b\u8106\u5f31\u6027\u304c\u3042\u308a\u3001\u8a8d\u8a3c\u3055\u308c\u305f\u30ea\u30e2\u30fc\u30c8\u653b\u6483\u8005\u304c\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3067\u304d\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-20034 CVSS 8.8 | HIGH", "url": "https://bsky.app/profile/postac001.bsky.social/post/3ml7gsmblgz2k"}, {"timestamp": "2026-05-06T22:00:00Z", "date_only": false, "value": "2026-05-06T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1388", "record": "WID-SEC-W-2026-1388", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-05-06T22:00:00Z", "date_only": false, "value": "2026-05-06T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1388", "record": "WID-SEC-W-2026-1388", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-05-06T22:00:00Z", "date_only": false, "value": "2026-05-06T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1388", "record": "WID-SEC-W-2026-1388", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-05-06T22:00:00Z", "date_only": false, "value": "2026-05-06T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1388", "record": "WID-SEC-W-2026-1388", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-05-07T00:00:00Z", "date_only": false, "value": "2026-05-07T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0544", "record": "CERTFR-2026-AVI-0544", "field": "last_revision_date"}, {"timestamp": "2026-05-07T00:00:00Z", "date_only": false, "value": "2026-05-07T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0544", "record": "CERTFR-2026-AVI-0544", "field": "initial_release_date"}, {"timestamp": "2026-05-07T00:00:00Z", "date_only": false, "value": "2026-05-07T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0544", "record": "CERTFR-2026-AVI-0544", "field": "revisions.0.revision_date"}, {"timestamp": "2026-05-07T00:53:19Z", "date_only": false, "value": "2026-05-07T00:53:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-24", "record": "CVE-2026-20034", "field": "creation_timestamp", "uuid": "0281f604-5ab6-4a3c-8043-f1a9cdcd5f6e", "url": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-24"}, {"timestamp": "2026-05-07T03:55:48.652Z", "date_only": false, "value": "2026-05-07T03:55:48.652Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-20034", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-05-07T03:55:48.652Z", "date_only": false, "value": "2026-05-07T03:55:48.652Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-20034", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-07T10:32:02.720Z", "date_only": false, "value": "2026-05-07T10:32:02.720+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1388", "record": "WID-SEC-W-2026-1388", "field": "document.tracking.generator.date"}, {"timestamp": "2026-05-07T14:40:13.041Z", "date_only": false, "value": "2026-05-07T14:40:13.041001Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mlbh2zrqup2k", "record": "CVE-2026-20034", "field": "creation_timestamp", "uuid": "d118da33-660a-44e6-ad7e-6337f5df6904", "content": "\ud83d\udd17 CVE : CVE-2026-20034, CVE-2026-20035, CVE-2026-20167, CVE-2026-20168, CVE-2026-20169, CVE-2026-20185, CVE-2026-20188", "url": "https://bsky.app/profile/o2cloud.bsky.social/post/3mlbh2zrqup2k"}, {"timestamp": "2026-05-08T13:08:42.320Z", "date_only": false, "value": "2026-05-08T13:08:42.320356Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0136", "record": "NCSC-2026-0136", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-05-08T13:08:42.320Z", "date_only": false, "value": "2026-05-08T13:08:42.320356Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0136", "record": "NCSC-2026-0136", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-05-08T13:08:42.320Z", "date_only": false, "value": "2026-05-08T13:08:42.320356Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0136", "record": "NCSC-2026-0136", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-05-19T21:13:28.045Z", "date_only": false, "value": "2026-05-19T21:13:28.045916Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mmacmzpaqs22", "record": "CVE-2026-20034", "field": "creation_timestamp", "uuid": "390c2cda-724c-4337-869d-2b9321ca74f4", "content": "Cisco\u304c\u30a8\u30f3\u30bf\u30fc\u30d7\u30e9\u30a4\u30ba\u88fd\u54c1\u306b\u304a\u3051\u308b\u91cd\u5927\u5ea6\u306e\u9ad8\u3044\u8106\u5f31\u6027\u3092\u4fee\u6b63\n\nCisco\u306f\u6c34\u66dc\u65e5\u306b\u3001\u30a8\u30f3\u30bf\u30fc\u30d7\u30e9\u30a4\u30ba\u88fd\u54c1\u5168\u4f53\u306b\u308f\u305f\u308b\u8907\u6570\u306e\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u30d1\u30c3\u30c1\u3092\u767a\u8868\u3057\u3001\u305d\u306e\u4e2d\u306b\u306f5\u3064\u306e\u9ad8\u91cd\u5927\u30d0\u30b0\u304c\u542b\u307e\u308c\u3066\u3044\u307e\u3059\u3002\n\nCVE-2026-20034 \u304a\u3088\u3073 CVE-2026-20035 \u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u305f\u3001\u30b5\u30fc\u30d0\u30fc\u5074\u30ea\u30af\u30a8\u30b9\u30c8\u30d5\u30a9\u30fc\u30b8\u30a7\u30ea\uff08SSRF\uff09\u653b\u6483\u306b\u3064\u306a\u304c\u308b\u53ef\u80fd\u6027\u306e\u3042\u308b 2 \u3064\u306e\u91cd\u5927\u5ea6\u306e\u9ad8\u3044\u554f\u984c\u304c\u3001Cisco Unity Connection \u3067\u89e3\u6c7a\u3055\u308c\u307e\u3057\u305f\u3002\n\n\u30e6\u30fc\u30b6\u30fc\u63d0\u4f9b\u306e\u5165\u529b\u3084\u7279\u5b9a\u306e HTTP \u30ea\u30af\u30a8\u30b9\u30c8\u306e\u691c\u8a3c\u304c\u4e0d\u5341\u5206\u3067\u3042\u308b\u3053\u3068\u306b\u8d77\u56e0\u3057\u3001\u305d\u306e\u6b20\u9665\u306f\u30ea\u30e2\u30fc\u30c8\u306e\u8a8d\u8a3c\u3055\u308c\u305f\u653b\u6483\u8005\u306b\u3088\u3063\u3066\u60aa\u7528\u3055\u308c\u2026", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mmacmzpaqs22"}, {"timestamp": "2026-07-01T16:01:11.203Z", "date_only": false, "value": "2026-07-01T16:01:11.203", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-20034", "record": "FKIE_CVE-2026-20034", "field": "lastModified"}, {"timestamp": "2026-09-12T10:00:15.397Z", "date_only": false, "value": "2026-09-12T10:00:15.397405Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/shimiscyberworld/1249", "record": "CVE-2026-20034", "field": "creation_timestamp", "uuid": "5c986f71-ac10-41a0-8337-1a3869b312c8", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-06\n\n\ud83d\udcca 25 vulnerabilities detected today \u2014 1 \ud83d\udd34 Critical, 24 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-41930 (9.8) \u2014 CVE-2026-41930: Vvveb Docker Hard-Coded Credentials Lead to\u2026\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2026-7841 (8.8) \u2014 GeoVision GV-ASWeb RCE: High-Severity Flaw Affects\u2026\n  \u2022 CVE-2025-31951 (8.8) \u2014 HCL BigFix RunBookAI Vulnerability Allows Command Smuggling\n  \u2022 CVE-2026-20034 (8.8) \u2014 Cisco Unity Connection: Authenticated RCE Via Web\u2026\n  \u2022 CVE-2026-42503 (8.8) \u2014 CVE-2026-42503: gopls Vulnerability Exposes Dev\u2026\n  \u2022 CVE-2026-7875 (8.8) \u2014 NanoClaw Container Vulnerability Allows Arbitrary File\u2026\n  \u2022 CVE-2026-41934 (8.8) \u2014 Vvveb RCE: Authenticated Users Can Achieve Unauthenticated\u2026\n  \u2022 CVE-2026-41938 (8.8) \u2014 CVE-2026-41938: Vvveb Unrestricted File Upload Leads to RCE\n  \u2022 CVE-2024-30151 (8.3) \u2014 HCL BigFix Service Management Privilege Escalation\u2026\n  \u2022 CVE-2026-41936 (8.1) \u2014 CVE-2026-41936: Vvveb XXE Allows File Disclosure, Privilege\u2026\n  \u2022 CVE-2026-6691 (7.8) \u2014 CVE-2026-6691: MongoDB C Driver Heap Overflow via GSSAPI\u2026\n  \u2026 and 14 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "url": "https://t.me/shimiscyberworld/1249"}]}