type: cve · created: 2026-10-20 · updated: 2026-10-20 · tags: [cve] · confidence: medium · severity: medium · affected_sectors: [global] · au_impact: false
Initial access came from credential exposure, brute-force password attacks (T1110) and VPN accounts reached through Mullvad IP addresses, exploiting CVE-2020-3259, CVE-2023-20269, CVE-2023-27532, CVE-2024-40711 and CVE-2024-40766 across edge devices and backup infrastructure.
| Attribute | Detail |
|---|---|
| CVE | CVE-2023-20269 |
| CVSS | 5.0 (MEDIUM) |
| Vendor / product | Cisco Adaptive Security Appliance and Firepower Threat Defense |
| Reported | 2026-10-20 |