Tag: 2026-02-16

4 Attack Reports | 89 Vulnerabilities

Attack reports

Nation-State Actors Exploit Notepad++ Supply Chain

A state-sponsored threat group known as Lotus Blossom compromised the official hosting infrastructure for Notepad++ between June and December 2025. The attackers hijacked traffic to the update server, allowing them to selectively target specific users, primarily in Southeast Asia across government,…
supply chain
cobalt strike
dll sideloading
infrastructure compromise
southeast asia
chrysalis
notepad++
chrysalis backdoor
2026-02-12
infrastructure hijacking
2026-02-16
Published: February 16, 2026
Downloadable IOCs: 20

Fake AI Assistant Extensions Targeting 260,000 Chrome Users via injected iframes

A coordinated campaign of Chrome extensions posing as AI assistants has been uncovered, affecting over 260,000 users. These extensions, while appearing legitimate, embed remote, server-controlled interfaces inside extension-controlled surfaces, granting access to sensitive browser capabilities. The…
browser security
data harvesting
chrome extensions
2026-02-16
ai assistants
extension spraying
iframes
Published: February 16, 2026
Downloadable IOCs: 0

Operation MacroMaze: New APT28 Campaign Using Basic Tooling and Legitimate Infrastructure

Operation MacroMaze, attributed to APT28 (Fancy Bear), targets entities in Western and Central Europe from September 2025 to January 2026. The campaign utilizes basic tools and legitimate services for infrastructure and data exfiltration. Multiple documents with varying macro variants act as droppe…
fancy bear
exfiltration
persistence
html
webhook
macros
vbscript
2026-02-16
batch files
droppers
operation macromaze
Published: February 16, 2026
Downloadable IOCs: 7

Lumma Stealer and Ninja Browser malware campaign abusing Google Groups

A malicious campaign exploiting Google Groups to distribute Lumma Stealer and Ninja Browser malware has been uncovered. The attackers infiltrate industry-related forums, posting seemingly legitimate technical discussions with embedded malicious download links. For Windows users, the payload is Lumm…
social engineering
lumma stealer
credential theft
lumma
2026-02-16
google groups
ninja browser
trojanized browser
Published: February 16, 2026
Downloadable IOCs: 19
Click here to see more Attack Reports

Vulnerabilities

CVE-2026-2577

10.0
    Nanobot
  • Whatsapp Bridge
Published: February 16, 2026

CVE-2025-15578

9.8
    Maypole
  • Maypole
Published: February 16, 2026

CVE-2026-2439

9.8
    Concierge
  • Sessions
Published: February 16, 2026

CVE-2026-2564

9.2
    Intelbras
  • Vip 3260 Z Ia
Published: February 16, 2026

CVE-2025-65717

9.1
    Visual Studio Code
  • Live Server
Published: February 16, 2026

CVE-2026-2550

8.9
    Efm
  • Iptime A6004mx
Published: February 16, 2026

CVE-2026-2447

8.8
    Mozilla
  • Firefox
  • Firefox Esr
    Libvpx
Published: February 16, 2026

CVE-2025-65716

8.8
    Visual Studio Code Extensions
  • Markdown Preview Enhanced
Published: February 16, 2026

CVE-2026-2001

8.8
    Wordpress
  • Wowrevenue Plugin
Published: February 16, 2026

CVE-2026-2101

8.7
    3ds
  • Enoviavpm
Published: February 16, 2026

CVE-2026-1333

7.8
    3ds
  • Solidworks Edrawings
Published: February 16, 2026

CVE-2026-1334

7.8
    3ds
  • Solidworks Edrawings
Published: February 16, 2026

CVE-2026-1335

7.8
    3ds
  • Solidworks Edrawings
Published: February 16, 2026

CVE-2026-1046

7.6
    Mattermost
  • Mattermost Desktop App
Published: February 16, 2026

CVE-2026-2415

7.5
    Pretix
  • Pretix
Published: February 16, 2026

CVE-2026-2451

7.5
    Pretix
  • Pretix
Published: February 16, 2026

CVE-2026-2452

7.5
    Pretix
  • Pretix
Published: February 16, 2026

CVE-2026-2474

7.5
    Perl
  • Crypt
Published: February 16, 2026

CVE-2026-2538

7.3
    Flos
  • Notepad2
Published: February 16, 2026

CVE-2026-2542

7.3
    Total Vpn
  • Total Vpn
Published: February 16, 2026

CVE-2026-2566

7.3
    Wavlink
  • Wl-Nu516u1
Published: February 16, 2026

CVE-2026-2567

7.3
    Wavlink
  • Wl-Nu516u1
Published: February 16, 2026

CVE-2026-26930

7.2
    Smartertools
  • Smartermail
Published: February 16, 2026

CVE-2026-2533

6.9
    Tosei
  • Self-Service Washing Machine
Published: February 16, 2026

CVE-2026-2544

6.9
    Yued-Fe
  • Lulu Ui
Published: February 16, 2026

CVE-2026-2549

6.9
    Zhanghuanhao
  • Librarysystem
Published: February 16, 2026

CVE-2026-2565

6.6
    Wavlink
  • Wl-Nu516u1
Published: February 16, 2026

CVE-2025-13821

5.7
    Mattermost
  • Mattermost
Published: February 16, 2026

CVE-2026-2522

5.5
    Open5gs
  • Open5gs
Published: February 16, 2026

CVE-2026-2523

5.5
    Open5gs
  • Open5gs
Published: February 16, 2026

CVE-2026-2524

5.5
    Open5gs
  • Open5gs
Published: February 16, 2026

CVE-2026-2525

5.5
    Free5gc
  • Free5gc
Published: February 16, 2026

CVE-2026-0999

5.4
    Mattermost
  • Mattermost
Published: February 16, 2026

CVE-2026-2526

5.3
    Wavlink
  • Wl-Wn579a3
Published: February 16, 2026

CVE-2026-2527

5.3
    Wavlink
  • Wl-Wn579a3
Published: February 16, 2026

CVE-2026-2528

5.3
    Wavlink
  • Wavlink Wl-Wn579a3
Published: February 16, 2026

CVE-2026-2529

5.3
    Wavlink
  • Wln579a3
Published: February 16, 2026

CVE-2026-2530

5.3
    Wavlink
  • Wl-Wn579a3
Published: February 16, 2026

CVE-2026-2531

5.3
    Mindsdb
  • Mindsdb
Published: February 16, 2026

CVE-2026-2532

5.3
    Lintsinghua
  • Deepaudit
Published: February 16, 2026

CVE-2026-2534

5.3
    Comfast
  • Cf-N1 V2
Published: February 16, 2026

CVE-2026-2535

5.3
    Comfast
  • Cf-N1 V2
Published: February 16, 2026

CVE-2026-2536

5.3
    Opencc
  • Jflow
Published: February 16, 2026

CVE-2026-2548

5.3
    Wayos
  • Fbm-220g
Published: February 16, 2026

CVE-2026-2551

5.3
    Zentao
  • Zentao
Published: February 16, 2026

CVE-2026-2553

5.3
    Tushar
  • Hotel-Management-System
Published: February 16, 2026

CVE-2026-2556

5.3
    Cskefu
  • Cskefu
Published: February 16, 2026

CVE-2026-2558

5.3
    Geekai
  • Geekai
Published: February 16, 2026

CVE-2026-2560

5.3
    Kalcaddle
  • Kodbok
Published: February 16, 2026

CVE-2026-2561

5.3
    Jingdong
  • Jd Cloud Box Ax6600
Published: February 16, 2026

CVE-2026-2562

5.3
    Jingdong
  • Jd Cloud Box
Published: February 16, 2026

CVE-2026-2563

5.3
    Jingdong
  • J Cloud Box
Published: February 16, 2026

CVE-2019-25379

5.3
    Smoothwall
  • Smoothwall Express
Published: February 16, 2026

CVE-2019-25394

5.3
    Smoothwall
  • Smoothwall Express
Published: February 16, 2026

CVE-2019-25395

5.3
    Smoothwall
  • Smoothwall Express
Published: February 16, 2026

CVE-2026-2537

5.1
    Comfast
  • Cf-E4
Published: February 16, 2026

CVE-2026-2543

5.1
    Vichan
  • Vichan
Published: February 16, 2026

CVE-2026-2545

5.1
    Ligerosmart
  • Ligerosmart
Published: February 16, 2026

CVE-2026-2546

5.1
    Ligerosmart
  • Ligerosmart
Published: February 16, 2026

CVE-2026-2547

5.1
    Ligerosmart
  • Ligerosmart
Published: February 16, 2026

CVE-2025-59903

5.1
    Kubysoft
  • Kubysoft
Published: February 16, 2026

CVE-2025-59904

5.1
    Kubysoft
  • Kubysoft
Published: February 16, 2026

CVE-2026-2552

5.1
    Zentao
  • Zentao
Published: February 16, 2026

CVE-2026-2557

5.1
    Cskefu
  • Cskefu
Published: February 16, 2026

CVE-2019-25378

5.1
    Smoothwall
  • Smoothwall Express
Published: February 16, 2026

CVE-2019-25380

5.1
    Smoothwall
  • Smoothwall Express
Published: February 16, 2026

CVE-2019-25381

5.1
    Smoothwall
  • Smoothwall Express
Published: February 16, 2026

CVE-2019-25382

5.1
    Smoothwall
  • Smoothwall Express
Published: February 16, 2026

CVE-2019-25383

5.1
    Smoothwall
  • Smoothwall Express
Published: February 16, 2026

CVE-2019-25384

5.1
    Smoothwall
  • Express
Published: February 16, 2026

CVE-2019-25385

5.1
    Smoothwall
  • Smoothwall Express
Published: February 16, 2026

CVE-2019-25386

5.1
    Smoothwall
  • Smoothwall Express
Published: February 16, 2026

CVE-2019-25387

5.1
    Smoothwall
  • Smoothwall Express
Published: February 16, 2026

CVE-2019-25388

5.1
    Smoothwall
  • Smoothwall Express
Published: February 16, 2026

CVE-2019-25389

5.1
    Smoothwall
  • Smoothwall Express
Published: February 16, 2026

CVE-2019-25392

5.1
    Smoothwall
  • Smoothwall Express
Published: February 16, 2026

CVE-2019-25393

5.1
    Smoothwall
  • Express
Published: February 16, 2026

CVE-2025-59905

4.8
    Kubysoft
  • Kubysoft
Published: February 16, 2026

CVE-2019-25390

4.8
    Smoothwall
  • Smoothwall Express
Published: February 16, 2026

CVE-2026-0929

4.3
    Registrationmagic
  • Registrationmagic
Published: February 16, 2026

CVE-2026-0997

4.3
    Mattermost
  • Mattermost
  • Plugin Zoom
Published: February 16, 2026

CVE-2026-0998

4.3
    Mattermost
  • Mattermost
  • Plugin Zoom
Published: February 16, 2026

CVE-2025-2418

4.3
    Tr7 Cyber Defense Inc
  • Web Application Firewall
Published: February 16, 2026

CVE-2025-14350

4.3
    Mattermost
  • Mattermost
Published: February 16, 2026

CVE-2026-2032

4.3
    Mozilla
  • Firefox
Published: February 16, 2026

CVE-2025-14573

3.8
    Mattermost
  • Mattermost
Published: February 16, 2026

CVE-2026-2555

2.3
    Jeecg
  • Jeecgboot
Published: February 16, 2026

CVE-2025-65715

None
    Visual Studio Code
  • Code Runner
Published: February 16, 2026

CVE-2026-1783

None
    Wordpress
  • *
Published: February 16, 2026
Click here to see more Vulnerabilities