Threat actor
UAT-11473
Also tracked as uat11473
Tracked by CyberSIXT since 29 Oct · RSS
1Articles, all time
1Articles, last 30 days
1CVEs exploited, attributed · all time
0Research reports, all time
Activity
Developinglatest 2 hours ago1 article1 outlet
One article so far, 29 Oct. A pattern appears once more outlets cover UAT-11473.
- Thu 29 Oct. SecurityOnline. UAT-11473 implants KeyDrift malware on Cisco SD-WAN systems. Cites a CVE in CISA KEV.
- Known exploited CVE
- Article naming UAT-11473
- Articles a day, all coverage
Drawn: the only article.
Show as tableHide table
| Date | Type | Source | Title |
|---|---|---|---|
| 29 Oct | Article | SecurityOnline | UAT-11473 implants KeyDrift malware on Cisco SD-WAN systems |
Connections
1 exploited CVE. What the record links this actor to; hover or use the arrow keys.
In CISA KEV
Show as a listHide the list
- Exploited CVEs
- CVE-2026-20127
- Affected vendors
- Cisco
CVEs exploited1
CVEs an article attributes to UAT-11473, most covered first
- CVE-2026-20127Exploited
Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability
10.0Critical89% EPSS · 22 articles
MITRE ATT&CK techniques
No MITRE ATT&CK® techniques are recorded for UAT-11473.
Articles1
Drawn: the only article.
- UAT-11473 implants KeyDrift malware on Cisco SD-WAN systemsSecurityOnlineExploitedCVE-2026-20127