Tag: 2026-05-05

7 Attack Reports | 193 Vulnerabilities

Attack reports

Iranian-Nexus Operation Against Oman's Government: 12 Ministries Hit and 26,000 Citizen Records Exposed

An exposed command and control server on RouterHosting infrastructure revealed an active Iranian-nexus intrusion campaign targeting twelve Omani government ministries. The operation primarily focused on the Ministry of Justice and Legal Affairs, deploying custom webshells that provided persistent a…
proxyshell
apt34
2026-05-05
dotnetnuke
iranian-nexus
Published: May 5, 2026
Downloadable IOCs: 1

Malicious OpenClaw Skill Distributes Remcos RAT and GhostLoader

In March 2026, threat actors weaponized the OpenClaw AI agent framework by publishing a deceptive "DeepSeek-Claw" skill. This skill embedded malicious installation instructions designed to trick AI agents and developers into executing hidden payloads. On Windows systems, a PowerShell command downlo…
remcos
openclaw
ghostloader
2026-05-05
deepseek-claw
Published: May 5, 2026
Downloadable IOCs: 4

Four published versions of a fake "tanstack" package uploaded in 27 minutes that want to steal your .env files

An attacker registered the unscoped 'tanstack' name on npm and published four malicious versions (2.0.4-2.0.7) within 27 minutes on April 29, 2026. These packages contained postinstall hooks that automatically exfiltrated environment files containing sensitive credentials when developers ran npm in…
supply-chain
npm
2026-05-05
package-squatting
postinstall-hook
tanstack
webhook-exfiltration
Published: May 5, 2026
Downloadable IOCs: 5

Popular DAEMON Tools software compromised

Since April 8, 2026, installers of DAEMON Tools software have been compromised with malicious payloads distributed through the legitimate website. Versions 12.5.0.2421 to 12.5.0.2434 contain trojaned binaries (DTHelper.exe, DiscSoftBusServiceLite.exe, DTShellHlp.exe) signed with legitimate develope…
2026-05-05
daemon tools
quic rat
software compromise
Published: May 5, 2026
Downloadable IOCs: 3

UAT-8302 and its box full of malware

UAT-8302 is a sophisticated China-nexus advanced persistent threat group targeting government entities in South America since late 2024 and southeastern Europe in 2025. The actor deploys multiple custom-made malware families including NetDraft, a .NET-based backdoor variant of FinalDraft/SquidDoor,…
cloudsorcerer
snappybee
finaldraft
vshell
snowlight
deedrat
zingdoor
nosydoor
2026-05-05
draculoader
fringeporch
netdraft
snowrust
squiddoor
Published: May 5, 2026
Linked vulnerabilities : CVE-2025-0994 (CVSS 8.8), CVE-2025-20333 (CVSS 9.9), CVE-2025-20362 (CVSS 6.5)
Downloadable IOCs: 33

CloudZ RAT potentially steals OTP messages using Pheno plugin

Cisco Talos uncovered an intrusion active since January 2026 where attackers deployed CloudZ remote access tool and an undocumented plugin called Pheno to steal credentials and one-time passwords. The attack exploits Microsoft Phone Link application by intercepting synchronized mobile data includin…
2026-05-05
cloudz
pheno
Published: May 5, 2026
Downloadable IOCs: 6

A rigged game: compromises gaming platform in a supply-chain attack

North Korea-aligned APT group ScarCruft executed a multiplatform supply-chain attack targeting ethnic Koreans in China's Yanbian region, an area significant for North Korean refugees and defectors. Since late 2024, the group compromised a video gaming platform dedicated to Yanbian-themed games, tro…
supply-chain attack
android trojan
2026-05-05
birdcall
gaming platform compromise
yanbian targeting
Published: May 5, 2026
Downloadable IOCs: 9
Click here to see more Attack Reports

Vulnerabilities

CVE-2026-7411

10.0
    Eclipse
  • Basyx Java Server Sdk
Published: May 5, 2026

CVE-2026-5722

9.8
    Wordpress
  • Moreconvert Pro
Published: May 5, 2026

CVE-2025-13618

9.8
    Wordpress
  • Mentoring
Published: May 5, 2026

CVE-2026-5294

9.8
    Wordpress
  • Geeky Bot Plugin
Published: May 5, 2026

CVE-2026-27960

9.8
    Opencti
  • Opencti
Published: May 5, 2026

CVE-2026-33324

9.4
    Sqlbot
  • Sqlbot
Published: May 5, 2026

CVE-2026-40797

9.3
    Saleswonder
  • Webinarignition
Published: May 5, 2026

CVE-2023-54342

9.3
    Eclipse
  • Equinox Osgi
Published: May 5, 2026

CVE-2023-54344

9.3
    Eclipse
  • Equinox Osgi
Published: May 5, 2026

CVE-2026-43534

9.3
    Openclaw
  • Openclaw
Published: May 5, 2026

CVE-2026-34458

9.3
    Sandboxie
  • Sandboxie-Plus
Published: May 5, 2026

CVE-2026-40329

9.3
    Masa
  • Cms
Published: May 5, 2026

CVE-2026-40330

9.3
    Masa Cms
  • Masa Cms
Published: May 5, 2026

CVE-2026-40331

9.3
    Masa Cms
  • Masa Cms
Published: May 5, 2026

CVE-2026-34084

9.2
    Phpspreadsheet
  • Phpspreadsheet
Published: May 5, 2026

CVE-2026-43566

9.1
    Openclaw
  • Openclaw
Published: May 5, 2026

CVE-2026-36356

9.1
    Meig
  • Smart Forge Slt711
    Goahead
Published: May 5, 2026

CVE-2026-7823

8.9
    Totolink
  • A8000ru
Published: May 5, 2026

CVE-2026-43533

8.9
    Openclaw
  • Openclaw
Published: May 5, 2026

CVE-2026-7834

8.9
    Efm
  • Iptime Nas1dual
Published: May 5, 2026

CVE-2026-7853

8.9
    D-Link
  • Di-8100
Published: May 5, 2026

CVE-2026-7854

8.9
    D-Link
  • Di-8100
Published: May 5, 2026

CVE-2026-6261

8.8
    Wordpress
  • Betheme
Published: May 5, 2026

CVE-2026-34459

8.8
    Sandboxie-Plus
  • Sandboxie
Published: May 5, 2026

CVE-2026-34464

8.8
    Sandboxie-Plus
  • Sandboxie-Plus
Published: May 5, 2026

CVE-2026-39852

8.8
    Redhat
  • Quarkus
Published: May 5, 2026

CVE-2026-35228

8.7
    Oracle
  • Oracle Mcp Server Helper Tool
Published: May 5, 2026

CVE-2023-54345

8.7
    Frappe
  • Erpnext
Published: May 5, 2026

CVE-2023-54346

8.7
    Wordpress
  • Backup Migration
Published: May 5, 2026

CVE-2023-54347

8.7
    Open-Emr
  • Openemr
Published: May 5, 2026

CVE-2023-54348

8.7
    Erpgo
  • Erpgo Saas
Published: May 5, 2026

CVE-2026-42434

8.7
    Openclaw
  • Openclaw
Published: May 5, 2026

CVE-2026-42435

8.7
    Openclaw
  • Openclaw
Published: May 5, 2026

CVE-2026-43530

8.7
    Openclaw
  • Openclaw
    Busybox
    Toybox
Published: May 5, 2026

CVE-2026-6918

8.7
    Eclipse
  • Openj9
Published: May 5, 2026

CVE-2026-32689

8.7
    Phoenixframework
  • Phoenix
Published: May 5, 2026

CVE-2026-32934

8.7
    Coredns
  • Coredns
Published: May 5, 2026

CVE-2026-32936

8.7
    Coredns
  • Coredns
Published: May 5, 2026

CVE-2026-33190

8.7
    Coredns
  • Coredns
Published: May 5, 2026

CVE-2026-39849

8.7
    Pi-Hole
  • Pi-Hole
Published: May 5, 2026

CVE-2026-7412

8.6
    Eclipse
  • Basyx Java Server Sdk
Published: May 5, 2026

CVE-2026-43526

8.3
    Openclaw
  • Openclaw
Published: May 5, 2026

CVE-2026-33975

8.3
    Twenty
  • Twenty
Published: May 5, 2026

CVE-2026-42437

8.2
    Openclaw
  • Openclaw
Published: May 5, 2026

CVE-2026-30923

8.2
    Modsecurity
  • Libmodsecurity3
Published: May 5, 2026

CVE-2026-32603

8.2
    Sandboxie
  • Sandboxie
Published: May 5, 2026

CVE-2026-33489

8.2
    Coredns
  • Coredns
Published: May 5, 2026

CVE-2026-35579

8.2
    Coredns
  • Coredns
Published: May 5, 2026

CVE-2026-40075

8.2
    Openmrs
  • Core
Published: May 5, 2026

CVE-2026-44331

8.1
    Proftpd
  • Proftpd
Published: May 5, 2026

CVE-2026-40280

7.8
    Wentz
  • Gotenberg
Published: May 5, 2026

CVE-2026-43569

7.7
    Openclaw
  • Openclaw
Published: May 5, 2026

CVE-2026-43571

7.7
    Openclaw
  • Openclaw
Published: May 5, 2026

CVE-2026-36355

7.7
    Realtek
  • Rtl8192cd
  • Rtl819x Jungle Sdk
Published: May 5, 2026

CVE-2026-23479

7.7
    Redis
  • Redis Server
Published: May 5, 2026

CVE-2026-25243

7.7
    Redislabs
  • Redis
    Redis
Published: May 5, 2026

CVE-2026-25588

7.7
    Redis
  • Redis Timeseries
  • Redis
Published: May 5, 2026

CVE-2026-25589

7.7
    Redis
  • Redis Bloom
Published: May 5, 2026

CVE-2026-42997

7.7
    Openstack
  • Ironic
Published: May 5, 2026

CVE-2026-40068

7.7
    Claude
  • Claude Code
Published: May 5, 2026

CVE-2026-43535

7.6
    Openclaw
  • Openclaw
Published: May 5, 2026

CVE-2026-35397

7.6
    Jupyter
  • Jupyter Server
Published: May 5, 2026

CVE-2026-40110

7.6
    Jupyter
  • Jupyter Server
Published: May 5, 2026

CVE-2026-40934

7.6
    Jupyter
  • Jupyter Server
Published: May 5, 2026

CVE-2026-44028

7.5
    Nixos
  • Nix
    Lix
Published: May 5, 2026

CVE-2026-5100

7.5
    Awp
  • Classifieds
Published: May 5, 2026

CVE-2026-3456

7.5
    Wordpress
  • Geekybot
Published: May 5, 2026

CVE-2026-5192

7.5
    Wordpress
  • Forminator
Published: May 5, 2026

CVE-2026-3359

7.5
    10web
  • Form Maker
Published: May 5, 2026

CVE-2026-6322

7.5
    Fast-Uri
  • Fast-Uri
Published: May 5, 2026

CVE-2026-4304

7.5
    Wordpress
  • Weepie Cookie Allow
Published: May 5, 2026

CVE-2026-7865

7.4
    Crestron
  • Crestron Device
Published: May 5, 2026

CVE-2026-7855

7.4
    D-Link
  • Di-8100
Published: May 5, 2026

CVE-2026-7833

7.3
    Efm
  • Iptime C200
Published: May 5, 2026

CVE-2026-29168

7.3
    Apache
  • Http Server
Published: May 5, 2026

CVE-2026-7851

7.3
    D-Link
  • Di-8100
Published: May 5, 2026

CVE-2026-34461

7.3
    Sandboxie-Plus
  • Sandboxie-Plus
Published: May 5, 2026

CVE-2026-34462

7.3
    Sandboxie
  • Sandboxie-Plus
Published: May 5, 2026

CVE-2026-7856

7.3
    D-Link
  • Di-8100
Published: May 5, 2026

CVE-2026-7857

7.3
    D-Link
  • Di-8100
Published: May 5, 2026

CVE-2026-4803

7.2
    Wordpress
  • Royal Elementor Addons
Published: May 5, 2026

CVE-2026-42433

7.1
    Openclaw
  • Openclaw
Published: May 5, 2026

CVE-2026-43528

7.1
    Openclaw
  • Openclaw
Published: May 5, 2026

CVE-2026-43567

7.1
    Openclaw
  • Openclaw
Published: May 5, 2026

CVE-2026-43568

7.1
    Openclaw
  • Openclaw
Published: May 5, 2026

CVE-2026-43531

7.0
    Openclaw
  • Openclaw
Published: May 5, 2026

CVE-2026-39383

6.9
    Gotenberg
  • Gotenberg
Published: May 5, 2026

CVE-2026-31893

6.8
    Tunnelblick
  • Tunnelblick
Published: May 5, 2026

CVE-2026-4409

6.5
    Wordpress
  • Subscribe To Comments Reloaded
Published: May 5, 2026

CVE-2026-5957

6.5
    Wordpress
  • Emailkit
Published: May 5, 2026

CVE-2026-4362

6.5
    Wp-Elementskit
  • Elementskit
Published: May 5, 2026

CVE-2026-3454

6.5
    Wordpress
  • Generateblocks
Published: May 5, 2026

CVE-2025-42611

6.5
    Mikrotik
  • Routeros
  • Openvpn
  • Capsman
  • Dot1x
Published: May 5, 2026

CVE-2026-6262

6.5
    Muffingroup
  • Betheme
Published: May 5, 2026

CVE-2026-27644

6.5
    Traccar
  • Traccar
Published: May 5, 2026

CVE-2026-30246

6.5
    Gofiber
  • Fiber
Published: May 5, 2026

CVE-2026-2868

6.4
    Wordpress
  • Gutenverse
Published: May 5, 2026

CVE-2026-4730

6.4
    Charts Ninja
  • Charts Ninja
Published: May 5, 2026

CVE-2026-5505

6.4
    Wordpress
  • Wp-Clippy
Published: May 5, 2026

CVE-2026-6255

6.4
    Wordpress
  • Simple Owl Shortcodes
Published: May 5, 2026

CVE-2026-2948

6.4
    Gutenverse
  • Gutenverse
Published: May 5, 2026

CVE-2026-4665

6.4
    Wordpress
  • Wp Carousel Free
Published: May 5, 2026

CVE-2026-5159

6.4
    Royal Addons
  • For Elementor
Published: May 5, 2026

CVE-2026-7832

6.4
    Iobit
  • Advanced Systemcare
  • Asc
Published: May 5, 2026

CVE-2026-43527

6.3
    Openclaw
  • Openclaw
Published: May 5, 2026

CVE-2026-43572

6.3
    Openclaw
  • Openclaw
    Microsoft
Published: May 5, 2026

CVE-2025-61669

6.3
    Jupyter
  • Jupyter Server
Published: May 5, 2026

CVE-2026-5766

6.3
    Djangoproject
  • Django
Published: May 5, 2026

CVE-2026-6696

6.1
    Zingaya
  • Click-To-Call
Published: May 5, 2026

CVE-2026-6702

6.1
    Wordpress
  • Publish 2 Ping.Fm Plugin
Published: May 5, 2026

CVE-2026-6704

6.1
    Wordpress
  • Blog Settings Plugin
Published: May 5, 2026

CVE-2026-34000

6.1
    X.Org
  • X Server
Published: May 5, 2026

CVE-2026-34002

6.1
    Xorg
  • X Server
Published: May 5, 2026

CVE-2026-23631

6.1
    Redis
  • Redis
Published: May 5, 2026

CVE-2026-43570

6.0
    Openclaw
  • *
Published: May 5, 2026

CVE-2026-43574

6.0
    Openclaw
  • Openclaw
Published: May 5, 2026

CVE-2026-41950

6.0
    Dify
  • Dify
Published: May 5, 2026

CVE-2026-7824

5.9
    Papercut
  • Papercut Hive
    Ricoh
Published: May 5, 2026

CVE-2026-28510

5.9
    Elabftw
  • Elabftw
Published: May 5, 2026

CVE-2026-34956

5.9
    Openvswitch
  • Openvswitch
Published: May 5, 2026

CVE-2026-7784

5.5
    Rtgs2017
  • Nagaagent
Published: May 5, 2026

CVE-2026-7785

5.5
    A-G-U-P-T-A
  • Wireshark-Mcp
Published: May 5, 2026

CVE-2026-7788

5.5
    Axle-Bucamp
  • Mcp-Docusaurus
Published: May 5, 2026

CVE-2026-5247

5.5
    Publishpress
  • Publishpress Future
Published: May 5, 2026

CVE-2026-7810

5.5
    Usamak98
  • Python-Notebook-Mcp
Published: May 5, 2026

CVE-2026-7811

5.5
    54yyyu
  • Code-Mcp
Published: May 5, 2026

CVE-2026-7812

5.5
    54yyyu
  • Code-Mcp
Published: May 5, 2026

CVE-2026-27693

5.4
    Traccar
  • Traccar
Published: May 5, 2026

CVE-2026-27694

5.4
    Traccar
  • Traccar
Published: May 5, 2026

CVE-2026-34596

5.4
    Sandboxie-Plus
  • Sandboxie-Plus
Published: May 5, 2026

CVE-2026-44029

5.3
    Nix
  • Nix
Published: May 5, 2026

CVE-2026-2729

5.3
    Wordpress
  • Forminator
Published: May 5, 2026

CVE-2026-43868

5.3
    Apache
  • Thrift
Published: May 5, 2026

CVE-2026-43002

5.3
    Openstack
  • Horizon
Published: May 5, 2026

CVE-2026-31835

5.3
    Vaultwarden
  • Vaultwarden
Published: May 5, 2026

CVE-2026-32699

5.3
    Facturascripts
  • Facturascripts
Published: May 5, 2026

CVE-2026-33420

5.3
    Vaultwarden
  • Vaultwarden
Published: May 5, 2026

CVE-2026-35527

5.3
    Incus
  • Incus
Published: May 5, 2026

CVE-2023-54349

5.1
    Amazcart
  • Cms
Published: May 5, 2026

CVE-2026-7778

5.0
    Runzero
  • Runzero Platform
Published: May 5, 2026

CVE-2026-1921

4.9
    Loco Translate
  • Loco Translate
Published: May 5, 2026

CVE-2026-42436

4.9
    Openclaw
  • Openclaw
Published: May 5, 2026

CVE-2026-42438

4.9
    Openclaw
  • Openclaw
Published: May 5, 2026

CVE-2026-42439

4.9
    Openclaw
  • Openclaw
Published: May 5, 2026

CVE-2026-43532

4.9
    Openclaw
  • Openclaw
Published: May 5, 2026

CVE-2026-43573

4.9
    Openclaw
  • Openclaw
Published: May 5, 2026

CVE-2026-35453

4.8
    Phpspreadsheet
  • Phpspreadsheet
Published: May 5, 2026

CVE-2025-52206

4.7
    Ispconfig
  • Ispconfig
Published: May 5, 2026

CVE-2026-6418

4.6
    Papercut
  • Papercut Mf
Published: May 5, 2026

CVE-2026-6700

4.3
    Wordpress
  • Dx Sources Plugin
Published: May 5, 2026

CVE-2026-6701

4.3
    Wordpress
  • Addfreespace
Published: May 5, 2026

CVE-2026-3601

4.3
    Wordpress
  • User Registration Membership Plugin
Published: May 5, 2026

CVE-2026-39402

4.3
    Lxc
  • Lxc
Published: May 5, 2026

CVE-2026-6180

4.1
    Papercut
  • Papercut Mf
    Hp
Published: May 5, 2026

CVE-2026-35192

2.3
    Djangoproject
  • Django
Published: May 5, 2026

CVE-2026-6907

2.3
    Djangoproject
  • Django
Published: May 5, 2026

CVE-2026-7783

2.1
    Codecanyon
  • Perfex Crm
Published: May 5, 2026

CVE-2026-7822

2.1
    Itsourcecode
  • Courier Management System
Published: May 5, 2026

CVE-2026-7844

2.1
    Langchain
  • Chatchat
Published: May 5, 2026

CVE-2026-43529

2.0
    Openclaw
  • Openclaw
Published: May 5, 2026

CVE-2026-34527

2.0
    Sandboxie
  • Sandboxie-Plus
Published: May 5, 2026

CVE-2026-7845

1.2
    Chatchat-Space
  • Langchain-Chatchat
Published: May 5, 2026

CVE-2026-7846

1.2
    Chatchat-Space
  • Langchain-Chatchat
Published: May 5, 2026

CVE-2026-7847

1.2
    Langchain
  • Chatchat
Published: May 5, 2026

CVE-2026-43869

None
    Apache
  • Thrift
Published: May 5, 2026

CVE-2026-43870

None
    Apache
  • Thrift
Published: May 5, 2026

CVE-2026-34408

None
    Gambio
  • Gambio
Published: May 5, 2026

CVE-2025-66369

None
    Samsung
  • Mobile Processor
  • Modem
  • Wearable Processor
Published: May 5, 2026

CVE-2026-31195

None
    Altice Labs
  • Gr140dg
  • Gr140ig
    Sfr France
Published: May 5, 2026

CVE-2026-31196

None
    Altice Labs
  • Gr140dg
  • Gr140ig
Published: May 5, 2026

CVE-2026-39103

None
    Gpac
  • Gpac
Published: May 5, 2026

CVE-2026-43059

None
    Linux
  • Linux Kernel
    Bluetooth
Published: May 5, 2026

CVE-2026-43060

None
    Linux
  • Linux Kernel
Published: May 5, 2026

CVE-2026-43061

None
    Linux
  • Kernel
Published: May 5, 2026

CVE-2026-43062

None
    Linux
  • Linux Kernel
Published: May 5, 2026

CVE-2026-43063

None
    Linux
  • Linux Kernel
Published: May 5, 2026

CVE-2026-43064

None
    Linux
  • Linux Kernel
Published: May 5, 2026

CVE-2026-43065

None
    Linux
  • Kernel
Published: May 5, 2026

CVE-2026-43066

None
    Linux Foundation
  • Linux
  • Ext4
Published: May 5, 2026

CVE-2026-43067

None
    Linux
  • Linux Kernel
  • Ext4
Published: May 5, 2026

CVE-2026-43068

None
    Linux
  • Kernel
Published: May 5, 2026

CVE-2026-43069

None
    Linux
  • Linux Kernel
Published: May 5, 2026

CVE-2026-43070

None
    Linux
  • Kernel
Published: May 5, 2026

CVE-2026-43071

None
    Linux
  • Linux Kernel
Published: May 5, 2026

CVE-2026-43072

None
    Linux
  • Linux Kernel
  • Vc4
Published: May 5, 2026

CVE-2026-43073

None
    Linux
  • Linux Kernel
Published: May 5, 2026

CVE-2026-38429

None
    Opencms
  • Opencms
Published: May 5, 2026

CVE-2026-38431

None
    Erpnext
  • Erpnext
Published: May 5, 2026

CVE-2026-38432

None
    Erpnext
  • Erpnext
Published: May 5, 2026

CVE-2026-38428

None
    Kestra
  • Kestra
Published: May 5, 2026

CVE-2024-52911

None
    Bitcoin
  • Bitcoin Core
Published: May 5, 2026

CVE-2026-38947

None
    Fluentcms
  • Fluentcms
Published: May 5, 2026

CVE-2026-28780

None
    Apache
  • Http Server
Published: May 5, 2026
Click here to see more Vulnerabilities