{"type":"bundle","id":"bundle--93fde761-3171-57dc-acf3-166f38d0f23d","objects":[{"type":"identity","spec_version":"2.1","id":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-01-01T00:00:00.000Z","modified":"2026-01-01T00:00:00.000Z","name":"CTI-Hermes Autonomous Agent","identity_class":"organization"},{"type":"vulnerability","spec_version":"2.1","id":"vulnerability--c15d6e36-044a-5fb3-be07-f364163e184c","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-09-18T02:18:53.761635Z","modified":"2026-09-18T02:18:53.761635Z","name":"CVE-2026-20079","description":"Authentication bypass using an alternate path or channel in Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management that could allow an unauthenticated, remote attacker to bypass authentication and execute script files to obtain root access.","external_references":[{"source_name":"cve","external_id":"CVE-2026-20079","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-20079"}]},{"type":"vulnerability","spec_version":"2.1","id":"vulnerability--74593694-b609-5b1a-bf64-aa732f06d50c","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-09-18T02:18:53.761635Z","modified":"2026-09-18T02:18:53.761635Z","name":"CVE-2026-35273","description":"Missing authentication for critical function in Oracle PeopleSoft Enterprise PeopleTools that could allow an unauthenticated attacker to obtain takeover of PeopleSoft Enterprise PeopleTools; original research characterizes the same issue as a critical remote code execution vulnerability in the Environment Management component.","external_references":[{"source_name":"cve","external_id":"CVE-2026-35273","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-35273"}]},{"type":"attack-pattern","spec_version":"2.1","id":"attack-pattern--9ffe8e3a-6780-5277-ad7f-618967ae1f09","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-09-18T02:18:53.761635Z","modified":"2026-09-18T02:18:53.761635Z","name":"Exploit Public-Facing Application","external_references":[{"source_name":"mitre-attack","external_id":"T1190","url":"https://attack.mitre.org/techniques/T1190/"}]},{"type":"relationship","spec_version":"2.1","id":"relationship--0a4f8cd6-92c9-5581-a513-66f17954fd31","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-09-18T02:18:53.761635Z","modified":"2026-09-18T02:18:53.761635Z","relationship_type":"targets","source_ref":"attack-pattern--9ffe8e3a-6780-5277-ad7f-618967ae1f09","target_ref":"vulnerability--c15d6e36-044a-5fb3-be07-f364163e184c"},{"type":"relationship","spec_version":"2.1","id":"relationship--9a3c6fb9-0404-5322-aee1-1b9bcf5f360c","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-09-18T02:18:53.761635Z","modified":"2026-09-18T02:18:53.761635Z","relationship_type":"targets","source_ref":"attack-pattern--9ffe8e3a-6780-5277-ad7f-618967ae1f09","target_ref":"vulnerability--74593694-b609-5b1a-bf64-aa732f06d50c"},{"type":"report","spec_version":"2.1","id":"report--8fb3c09e-7d96-5dbe-8460-d9b0abfc2460","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-09-18T02:18:53.761635Z","modified":"2026-10-30T14:11:53.064821Z","name":"CISA KEV additions: Cisco Secure Firewall Management Center and Oracle PeopleSoft exploitation","description":"Two vulnerabilities that CISA has added to the Known Exploited Vulnerabilities catalog are assessed as actively exploited in public reporting: CVE-2026-20079, an authentication bypass in the Cisco Secure Firewall Management Center web interface, and CVE-2026-35273, an Oracle PeopleSoft Enterprise PeopleTools flaw in the Environment Management component. CISA's required-action due date for CVE-2026-20079 was 2026-09-12. This report describes public exploitation and vendor remediation guidance only; it makes no statement about any internal environment.","published":"2026-09-18T02:18:53.761635Z","report_types":["threat-report"],"object_refs":["identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","vulnerability--c15d6e36-044a-5fb3-be07-f364163e184c","vulnerability--74593694-b609-5b1a-bf64-aa732f06d50c","attack-pattern--9ffe8e3a-6780-5277-ad7f-618967ae1f09","relationship--0a4f8cd6-92c9-5581-a513-66f17954fd31","relationship--9a3c6fb9-0404-5322-aee1-1b9bcf5f360c"],"confidence":85}]}