Tag: 2026-05-07

6 Attack Reports | 200 Vulnerabilities

Attack reports

PCPJack | Cloud Worm Evicts TeamPCP and Steals Credentials at Scale

PCPJack is a sophisticated credential theft framework that propagates across exposed cloud infrastructure while systematically removing artifacts linked to TeamPCP, a threat actor behind notable 2026 supply chain compromises. The toolset harvests credentials from cloud platforms, containers, develo…
sliver
teampcp
2026-05-07
container worm
docker compromise
kubernetes exploitation
pcpjack
Published: May 7, 2026
Linked vulnerabilities : CVE-2025-29927 (CVSS 9.1), CVE-2025-48703 (CVSS 9.0), CVE-2025-9501 (CVSS 9.0), CVE-2025-55182 (CVSS 10.0), CVE-2026-1357 (CVSS 9.8)
Downloadable IOCs: 2

5 Malicious NuGet Packages Impersonate Chinese UI Libraries to Distribute Crypto Wallet and Credential Stealer

Five malicious NuGet packages published under account bmrxntfj impersonate Chinese .NET libraries to deploy an infostealer targeting browser credentials, cryptocurrency wallets, SSH keys, and local files. The packages typosquat legitimate Chinese UI and infrastructure libraries, grafting .NET React…
lumma
supply chain attack
nuget
browser credential theft
2026-05-07
arrowrat
quantum
Published: May 7, 2026
Downloadable IOCs: 9

Fake call logs, real payments: How CallPhantom tricks Android users

ESET researchers discovered 28 fraudulent Android applications on Google Play, collectively named CallPhantom, that falsely claimed to provide call histories, SMS records, and WhatsApp logs for any phone number. These apps were downloaded over 7.3 million times before removal, primarily targeting u…
google play
india targeting
2026-05-07
android fraud
callphantom
fake call history
fraudulent apps
subscription scam
upi payment
Published: May 7, 2026
Downloadable IOCs: 0

Donuts and Beagles: Fake Claude site spreads backdoor

A fraudulent website impersonating Anthropic's Claude AI platform has been distributing a previously undocumented backdoor called Beagle through malvertising campaigns. The attack begins when victims download a fictitious tool named Claude-Pro Relay from claude-pro[.]com, delivered as a 505 MB ZIP …
adaptixc2
donutloader
2026-05-07
beagle
beagle backdoor
Published: May 7, 2026
Downloadable IOCs: 0

Operation GriefLure: Dissecting an APT Campaign Targeting Vietnam's Military Telecom & Philippine Healthcare

A sophisticated spear phishing campaign dubbed Operation GriefLure targeted senior executives of Viettel Group, Vietnam's largest military-owned telecommunications provider, and St. Luke's Medical Center in the Philippines. The operation weaponized authentic legal documents from a genuine data brea…
spear phishing
living-off-the-land
2026-05-07
Published: May 7, 2026
Downloadable IOCs: 12

Threat Brief: Exploitation of PAN-OS Captive Portal Zero-Day for Unauthenticated Remote Code Execution

A buffer overflow vulnerability in the User-ID Authentication Portal of PAN-OS software allows unauthenticated attackers to execute arbitrary code with root privileges on PA-Series and VM-Series firewalls. Limited exploitation has been observed starting April 9, 2026, by a likely state-sponsored th…
zero-day
earthworm
buffer overflow
pan-os
reversesocks5
2026-05-07
tunneling tools
Published: May 7, 2026
Linked vulnerabilities : CVE-2023-33538, CVE-2025-23304 (CVSS 7.8), CVE-2025-55182 (CVSS 10.0), CVE-2025-66478, CVE-2025-14847 (CVSS 8.7), CVE-2026-22584, CVE-2026-1281 (CVSS 9.8), CVE-2026-1340 (CVSS 9.8), CVE-2026-1731 (CVSS 9.9), CVE-2025-0921, CVE-2026-31431, CVE-2026-0300 (CVSS 9.3)
Downloadable IOCs: 4
Click here to see more Attack Reports

Vulnerabilities

CVE-2026-42826

10.0
    Microsoft
  • Azure Devops
Published: May 7, 2026

CVE-2026-33109

9.9
    Microsoft
  • Azure Managed Instance For Apache Cassandra
Published: May 7, 2026

CVE-2026-6508

9.8
    Tubitak
  • Liderahenk
Published: May 7, 2026

CVE-2026-7414

9.8
    Yarbo
  • Firmware
Published: May 7, 2026

CVE-2026-7415

9.8
    Yarbo
  • Yarbo Firmware
Published: May 7, 2026

CVE-2026-37709

9.8
    Grokability
  • Snipe-It
Published: May 7, 2026

CVE-2026-5791

9.6
    Divvydrive
  • Divvydrive
Published: May 7, 2026

CVE-2026-41589

9.6
    Charm.Land
  • Wish
Published: May 7, 2026

CVE-2026-6795

9.6
    Divvydrive
  • Divvydrive
Published: May 7, 2026

CVE-2026-33823

9.6
    Microsoft
  • Microsoft Teams
Published: May 7, 2026

CVE-2026-35428

9.6
    Microsoft
  • Azure Cloud Shell
Published: May 7, 2026

CVE-2026-41202

9.4
    Ci4ms
  • Ci4ms
    Codeigniter
Published: May 7, 2026

CVE-2026-41203

9.4
    Ci4ms
  • Ci4ms
Published: May 7, 2026

CVE-2026-41586

9.3
    Hyperledger
  • Fabric
Published: May 7, 2026

CVE-2026-7891

9.3
    Mendix
  • Mendix Studio Pro
Published: May 7, 2026

CVE-2026-33587

9.2
    Lfnovo
  • Open-Notebook
Published: May 7, 2026

CVE-2026-40982

9.1
    Vmware
  • Spring Cloud Config
Published: May 7, 2026

CVE-2026-41201

9.1
    Codeigniter
  • Codeigniter
Published: May 7, 2026

CVE-2026-41902

9.1
    Freescout
  • Freescout
Published: May 7, 2026

CVE-2026-33844

9.0
    Microsoft
  • Azure Managed Instance
    Apache
Published: May 7, 2026

CVE-2026-5787

8.9
    Ivanti
  • Endpoint Manager Mobile
Published: May 7, 2026

CVE-2026-41142

8.8
    Openexr
  • Openexr
Published: May 7, 2026

CVE-2026-42216

8.8
    Openexr
  • Openexr
Published: May 7, 2026

CVE-2026-41139

8.8
    Mathjs
  • Math.Js
Published: May 7, 2026

CVE-2026-41143

8.8
    Yeswiki
  • Yeswiki
Published: May 7, 2026

CVE-2026-6692

8.8
    Slider Revolution
  • Slider Revolution
Published: May 7, 2026

CVE-2026-3953

8.8
    Gosoft
  • Proticaret E-Commerce
Published: May 7, 2026

CVE-2026-5784

8.8
    Divvydrive
  • Divvydrive
Published: May 7, 2026

CVE-2026-6002

8.8
    Divvydrive
  • Divvydrive
Published: May 7, 2026

CVE-2026-5786

8.8
    Ivanti
  • Endpoint Manager Mobile
Published: May 7, 2026

CVE-2026-42215

8.8
    Gitpython
  • Gitpython
Published: May 7, 2026

CVE-2026-32207

8.8
    Microsoft
  • Azure Machine Learning
Published: May 7, 2026

CVE-2026-41672

8.7
    Xmldom
  • Xml Dom
Published: May 7, 2026

CVE-2026-41673

8.7
    Github
  • @Xmldom
  • Xmldom
Published: May 7, 2026

CVE-2026-41674

8.7
    Xmldom
  • Xmldom
Published: May 7, 2026

CVE-2026-41675

8.7
    Xmldom
  • Xmldom
Published: May 7, 2026

CVE-2026-28201

8.7
    Lfnovo
  • Open-Notebook
Published: May 7, 2026

CVE-2026-41505

8.7
    Relate
  • Relate
Published: May 7, 2026

CVE-2026-41587

8.6
    Codeigniter
  • Ci4ms
Published: May 7, 2026

CVE-2026-42047

8.6
    Inngest
  • Inngest
Published: May 7, 2026

CVE-2026-35435

8.6
    Microsoft
  • Azure Ai Foundry M365
Published: May 7, 2026

CVE-2026-42449

8.5
    N8n
  • N8n
Published: May 7, 2026

CVE-2025-1978

8.3
    Hitachi
  • Virtual Storage Platform
  • Virtual Storage Platform One Block
Published: May 7, 2026

CVE-2026-41644

8.3
    Monetr
  • Monetr
Published: May 7, 2026

CVE-2025-14341

8.3
    Divvydrive
  • Divvydrive
Published: May 7, 2026

CVE-2026-41490

8.3
    Dagster
  • Dagster Core
  • Dagster Libraries
Published: May 7, 2026

CVE-2026-41422

8.3
    Daptin
  • Daptin
Published: May 7, 2026

CVE-2026-41669

8.2
    Admidio
  • Admidio
Published: May 7, 2026

CVE-2026-41670

8.2
    Admidio
  • Admidio
Published: May 7, 2026

CVE-2026-33589

8.2
    Lfnovo
  • Open-Notebook
Published: May 7, 2026

CVE-2026-42225

8.2
    Pjsip
  • Pjsip
Published: May 7, 2026

CVE-2026-34327

8.2
    Microsoft
  • Partner Center
Published: May 7, 2026

CVE-2026-7252

8.1
    Wordpress
  • Wp-Optimize
Published: May 7, 2026

CVE-2025-9661

8.1
    Hitachi
  • Hitachi Virtual Storage Platform One Block
Published: May 7, 2026

CVE-2026-42284

8.1
    Gitpython Project
  • Gitpython
Published: May 7, 2026

CVE-2026-42239

8.1
    Budibase
  • Budibase
Published: May 7, 2026

CVE-2026-41105

8.1
    Microsoft
  • Azure Notification Service
Published: May 7, 2026

CVE-2024-43384

8.0
    *
  • *
Published: May 7, 2026

CVE-2026-8034

7.9
    Github
  • Github Enterprise Server
Published: May 7, 2026

CVE-2026-42214

7.8
    Notepad Next
  • Notepad Next
Published: May 7, 2026

CVE-2026-44243

7.8
    Gitpython Project
  • Gitpython
Published: May 7, 2026

CVE-2026-44244

7.8
    Git
  • Gitpython
Published: May 7, 2026

CVE-2026-41688

7.7
    Wallos
  • Wallos
Published: May 7, 2026

CVE-2026-41905

7.7
    Freescout
  • Freescout
Published: May 7, 2026

CVE-2025-68060

7.6
    Wpmart
  • Team Member
Published: May 7, 2026

CVE-2026-41904

7.6
    Freescout
  • Freescout
Published: May 7, 2026

CVE-2026-40981

7.5
    Vmware
  • Spring Cloud Config
Published: May 7, 2026

CVE-2026-41640

7.5
    Nocobase
  • Nocobase
Published: May 7, 2026

CVE-2026-4348

7.5
    Betterdocs Pro
  • Betterdocs Pro
Published: May 7, 2026

CVE-2026-41642

7.5
    Osrg
  • Gobgp
Published: May 7, 2026

CVE-2026-41643

7.5
    Osrg
  • Gobgp
Published: May 7, 2026

CVE-2026-42285

7.5
    Gomodule
  • Go-Bgp
Published: May 7, 2026

CVE-2026-8093

7.5
    Mozilla
  • Firefox
Published: May 7, 2026

CVE-2025-65122

7.5
    Youtube-Regex
  • Youtube-Regex
Published: May 7, 2026

CVE-2026-26129

7.5
    Microsoft
  • M365 Copilot
Published: May 7, 2026

CVE-2026-26164

7.5
    Microsoft
  • M365 Copilot
Published: May 7, 2026

CVE-2026-33111

7.5
    Microsoft
  • Copilot Chat
Published: May 7, 2026

CVE-2026-42011

7.4
    Gnutls
  • Gnutls
Published: May 7, 2026

CVE-2026-7821

7.4
    Ivanti
  • Endpoint Manager Mobile
Published: May 7, 2026

CVE-2026-40213

7.4
    Openstack
  • Cyborg
Published: May 7, 2026

CVE-2026-8090

7.3
    Mozilla
  • Firefox
  • Firefox Esr
Published: May 7, 2026

CVE-2026-41002

7.2
    Vmware
  • Spring Cloud Config
Published: May 7, 2026

CVE-2026-41641

7.2
    Nocobase
  • Nocobase
Published: May 7, 2026

CVE-2026-6973

7.2
    Ivanti
  • Endpoint Manager Mobile
Published: May 7, 2026

CVE-2026-7413

7.2
    Yarbo
  • Firmware
Published: May 7, 2026

CVE-2026-44742

7.2
    Postorius
  • Postorius
Published: May 7, 2026

CVE-2026-41660

7.1
    Admidio
  • Admidio
Published: May 7, 2026

CVE-2026-8063

7.1
    Mongodb
  • Mongodb Server
Published: May 7, 2026

CVE-2026-42010

7.1
    Gnu
  • Gnutls
Published: May 7, 2026

CVE-2026-41554

7.1
    Bricks Builder
  • Bricks Builder
Published: May 7, 2026

CVE-2026-44349

7.1
    Daptin
  • Daptin
Published: May 7, 2026

CVE-2026-41906

7.1
    Freescout
  • Freescout
Published: May 7, 2026

CVE-2026-33588

7.0
    Lfnovo
  • Open-Notebook
Published: May 7, 2026

CVE-2026-5788

7.0
    Ivanti
  • Endpoint Manager Mobile
Published: May 7, 2026

CVE-2026-41653

7.0
    Bentopdf
  • Bentopdf
Published: May 7, 2026

CVE-2026-43510

7.0
    Cisa
  • Manage.Get.Gov
Published: May 7, 2026

CVE-2026-41890

6.9
    Codeigniter
  • Ci4ms
Published: May 7, 2026

CVE-2026-6805

6.9
    Thales
  • Cryptobox
Published: May 7, 2026

CVE-2026-32686

6.9
    Ericmj
  • Decimal
Published: May 7, 2026

CVE-2026-41928

6.9
    Vveb
  • Vveb
Published: May 7, 2026

CVE-2026-41671

6.8
    Admidio
  • Admidio
Published: May 7, 2026

CVE-2026-42194

6.8
    Admidio
  • Admidio
Published: May 7, 2026

CVE-2026-8080

6.8
    Misp
  • Misp
Published: May 7, 2026

CVE-2025-4386

6.8
    Medtronic
  • Mycarelink Patient Monitor
Published: May 7, 2026

CVE-2025-4397

6.8
    Medtronic
  • Mycarelink Patient Monitor
Published: May 7, 2026

CVE-2026-4807

6.5
    Appointment Booking Calendar
  • Appointment Booking Calendar
Published: May 7, 2026

CVE-2026-41655

6.5
    Admidio
  • Admidio
Published: May 7, 2026

CVE-2026-41658

6.5
    Admidio
  • Admidio
Published: May 7, 2026

CVE-2026-6214

6.5
    Wordpress
  • Forminator
Published: May 7, 2026

CVE-2026-27421

6.5
    Wproyal
  • Royal Elementor Addons
Published: May 7, 2026

CVE-2026-41647

6.5
    Linuxcontainers
  • Incus
Published: May 7, 2026

CVE-2026-41684

6.5
    Linuxcontainers
  • Incus
Published: May 7, 2026

CVE-2026-36387

6.5
    Codeastro
  • Membership Management System
Published: May 7, 2026

CVE-2026-41691

6.5
    I18next
  • I18nextify
Published: May 7, 2026

CVE-2026-42217

6.3
    Openexr
  • Openexr
Published: May 7, 2026

CVE-2026-40214

6.3
    Openstack
  • Cyborg
Published: May 7, 2026

CVE-2026-6736

6.3
    Github
  • Github Enterprise Server
Published: May 7, 2026

CVE-2026-7541

6.3
    Github
  • Github Enterprise Server
Published: May 7, 2026

CVE-2026-41661

6.1
    Admidio
  • Admidio
Published: May 7, 2026

CVE-2026-41650

6.1
    Fast-Xml-Parser
  • Fast-Xml-Parser
  • Xmlbuilder
Published: May 7, 2026

CVE-2026-41689

6.0
    Wallos
  • Wallos
Published: May 7, 2026

CVE-2025-62127

5.9
    Wen Themes
  • Wen Logo Slider
Published: May 7, 2026

CVE-2026-8106

5.9
    Github
  • Github Enterprise Server
Published: May 7, 2026

CVE-2026-44406

5.7
    Zte
  • Usmartview
Published: May 7, 2026

CVE-2026-40004

5.5
    Zte
  • Usmartview
Published: May 7, 2026

CVE-2026-8083

5.5
    Sourcecodester
  • Pharmacy Sales And Inventory System
Published: May 7, 2026

CVE-2026-8098

5.5
    Code-Projects
  • Feedback System
Published: May 7, 2026

CVE-2026-4430

5.4
    The Document Foundation
  • Libreoffice
Published: May 7, 2026

CVE-2025-68604

5.4
    Wpgraphql
  • Wpgraphql
Published: May 7, 2026

CVE-2026-36341

5.4
    Webkul
  • Krayin Crm
Published: May 7, 2026

CVE-2026-36388

5.4
    Phpgurukal
  • Hospital Management System
Published: May 7, 2026

CVE-2026-41903

5.4
    Freescout
  • Freescout
Published: May 7, 2026

CVE-2026-6222

5.3
    Wordpress
  • Forminator Forms
Published: May 7, 2026

CVE-2026-41891

5.3
    Codeigniter
  • Ci4ms
Published: May 7, 2026

CVE-2025-2514

5.3
    Hitachi
  • Virtual Storage Platform
Published: May 7, 2026

CVE-2025-66105

5.3
    Magepeople
  • Bus Ticket Booking With Seat Reservation
Published: May 7, 2026

CVE-2026-25436

5.3
    Wproyal
  • Royal Elementor Addons
Published: May 7, 2026

CVE-2026-25468

5.3
    Wedevs
  • Happy Addons For Elementor
Published: May 7, 2026

CVE-2026-27329

5.3
    Yith
  • Yith Woocommerce Wishlist
Published: May 7, 2026

CVE-2026-27416

5.3
    Bplugins
  • Pdf Poster
Published: May 7, 2026

CVE-2026-41648

5.3
    Linuxcontainers
  • Incus
Published: May 7, 2026

CVE-2026-41654

5.3
    Weblate
  • Weblate
Published: May 7, 2026

CVE-2026-42241

5.3
    Parquetsharp
  • Parquetsharp
Published: May 7, 2026

CVE-2026-41662

5.2
    Admidio
  • Admidio
Published: May 7, 2026

CVE-2026-40003

5.1
    Zte
  • Zte Zx297520v3
Published: May 7, 2026

CVE-2026-42259

5.1
    Saltcorn
  • Saltcorn
Published: May 7, 2026

CVE-2026-41929

5.1
    Vvveb
  • Vvveb
Published: May 7, 2026

CVE-2026-41413

5.0
    Istio
  • Istio
Published: May 7, 2026

CVE-2026-41657

4.9
    Admidio
  • Admidio
Published: May 7, 2026

CVE-2026-44407

4.7
    Zte
  • Usmartview
Published: May 7, 2026

CVE-2026-41692

4.7
    I18nextify
  • I18nextify
Published: May 7, 2026

CVE-2026-41656

4.5
    Admidio
  • Admidio
Published: May 7, 2026

CVE-2026-41004

4.4
    Spring
  • Cloud Config
Published: May 7, 2026

CVE-2026-27415

4.3
    Pluginus.Net
  • Bear
Published: May 7, 2026

CVE-2026-41685

4.3
    Linuxcontainers
  • Incus
Published: May 7, 2026

CVE-2026-41687

4.3
    Wallos
  • Wallos
Published: May 7, 2026

CVE-2026-44263

4.3
    Weblate
  • Weblate
Published: May 7, 2026

CVE-2026-44264

4.3
    Weblate
  • Weblate
Published: May 7, 2026

CVE-2026-41519

4.2
    Weblate
  • Weblate
Published: May 7, 2026

CVE-2026-44597

3.7
    Torproject
  • Tor
Published: May 7, 2026

CVE-2026-44599

3.7
    Torproject
  • Tor
Published: May 7, 2026

CVE-2026-44600

3.7
    Torproject
  • Tor
Published: May 7, 2026

CVE-2026-44601

3.7
    Tor
  • Tor
Published: May 7, 2026

CVE-2026-44602

3.7
    Tor
  • Tor
Published: May 7, 2026

CVE-2026-44603

3.7
    Torproject
  • Tor
Published: May 7, 2026

CVE-2026-41663

3.5
    Admidio
  • Admidio
Published: May 7, 2026

CVE-2026-41659

2.7
    Admidio
  • Admidio
Published: May 7, 2026

CVE-2026-8081

2.1
    Router-For-Me
  • Cli Proxy Api
Published: May 7, 2026

CVE-2026-8097

2.1
    Codeastro
  • Online Classroom
Published: May 7, 2026

CVE-2026-8112

2.1
    8421bit
  • Miniclaw
Published: May 7, 2026

CVE-2026-8113

2.1
    8421bit
  • Miniclaw
Published: May 7, 2026

CVE-2026-8114

2.1
    Jeecg
  • Jeecgboot
Published: May 7, 2026

CVE-2026-8084

1.9
    Osgeo
  • Gdal
Published: May 7, 2026

CVE-2026-8086

1.9
    Osgeo
  • Gdal
Published: May 7, 2026

CVE-2026-8087

1.9
    Osgeo
  • Gdal
Published: May 7, 2026

CVE-2026-8088

1.9
    Osgeo
  • Gdal
Published: May 7, 2026

CVE-2026-8091

None
    Mozilla
  • Firefox
Published: May 7, 2026

CVE-2026-8092

None
    Mozilla
  • Firefox Esr
  • Firefox
Published: May 7, 2026

CVE-2026-8094

None
    Mozilla
  • Firefox
Published: May 7, 2026

CVE-2026-30495

None
    Optoma
  • Cinemax P2
    Android
Published: May 7, 2026

CVE-2026-30496

None
    Optoma
  • Cinemax P2
Published: May 7, 2026

CVE-2025-63705

None
    Node-Ts-Ocr
  • Node-Ts-Ocr
Published: May 7, 2026

CVE-2025-63706

None
    Npm
  • Next-Npm-Version
Published: May 7, 2026

CVE-2025-67202

None
    Sidekiq
  • Sidekiq-Cron
Published: May 7, 2026

CVE-2026-36458

None
    Chestnutcms
  • Chestnutcms
Published: May 7, 2026

CVE-2025-63703

None
    Parse-Ini
  • Parse-Ini
Published: May 7, 2026

CVE-2025-63704

None
    Npm
  • Query-Parser-String
Published: May 7, 2026

CVE-2026-33811

None
    Golang
  • Go
Published: May 7, 2026

CVE-2026-33814

None
    Golang
  • Golang
Published: May 7, 2026

CVE-2026-39817

None
    Golang
  • Go
Published: May 7, 2026

CVE-2026-39819

None
    Google
  • Go
Published: May 7, 2026

CVE-2026-39820

None
    Golang
  • Go
Published: May 7, 2026

CVE-2026-39823

None
    Golang
  • Go
Published: May 7, 2026

CVE-2026-39825

None
    Golang
  • Golang
Published: May 7, 2026

CVE-2026-39826

None
    Golang
  • Go
Published: May 7, 2026

CVE-2026-39836

None
    Golang
  • Go
    Microsoft
Published: May 7, 2026

CVE-2026-42499

None
    Golang
  • Golang
Published: May 7, 2026

CVE-2026-42501

None
    Golang
  • Go
Published: May 7, 2026

CVE-2026-8142

None
    Vince
  • Vince
Published: May 7, 2026

CVE-2026-44365

None
    *
  • *
Published: May 7, 2026
Click here to see more Vulnerabilities