Tag: 2026-05-22

3 Attack Reports | 43 Vulnerabilities

Attack reports

From edge appliance to enterprise compromise: Multi-stage Linux intrusion via F5 and Confluence

A sophisticated multi-stage intrusion began with the compromise of an internet-facing F5 BIG-IP load balancer running an end-of-life version. The threat actor established SSH access to a Linux server using privileged credentials, then conducted extensive reconnaissance including network scanning wi…
credential theft
2026-05-22
confluence exploitation
kerberos relay
Published: May 22, 2026
Linked vulnerabilities : CVE-2024-2012 (CVSS 9.1), CVE-2025-33073 (CVSS 8.8), CVE-2025-20333 (CVSS 9.9), CVE-2025-20362 (CVSS 6.5), CVE-2025-53521 (CVSS 8.7)
Downloadable IOCs: 5

Tracking Iranian APT Screening Serpens’ 2026 Espionage Campaigns

Unit 42 researchers identified six new remote access Trojan variants deployed by Iran-nexus APT group Screening Serpens between February and April 2026, coinciding with a regional conflict starting February 28, 2026. The group targeted entities in the U.S., Israel, UAE, and other Middle Eastern loc…
appdomainmanager hijacking
2026-05-22
iran nexus
minijunk v2
screening serpens
Published: May 22, 2026
Downloadable IOCs: 12

Cloud Atlas activity in the second half of 2025 and early 2026: new tools and a new payload

Cloud Atlas APT group targeted government organizations and commercial companies in Russia and Belarus during late 2025 and early 2026, employing phishing campaigns with malicious ZIP archives containing LNK shortcuts. The attackers deployed multiple backdoors including VBCloud for file theft and P…
valleyrat
netsupport rat
vbcloud
powershower
2026-05-22
cloud atlas
phantomheart
powercloud
reversesocks
Published: May 22, 2026
Linked vulnerabilities : CVE-2018-0802, CVE-2025-55182 (CVSS 10.0), CVE-2025-68670 (CVSS 9.1)
Downloadable IOCs: 17
Click here to see more Attack Reports

Vulnerabilities

CVE-2026-34908

10.0
    Ubiquiti
  • Unifi Os
Published: May 22, 2026

CVE-2026-34909

10.0
    Ubiquiti
  • Unifi Os
Published: May 22, 2026

CVE-2026-34910

10.0
    Ubiquiti
  • Unifi Os
Published: May 22, 2026

CVE-2026-9054

9.2
    *
  • *
Published: May 22, 2026

CVE-2026-33000

9.1
    Ubiquiti
  • Unifi Os
Published: May 22, 2026

CVE-2026-9018

8.8
    Wordpress
  • Easy Elements
Published: May 22, 2026

CVE-2026-25606

8.7
    Ster
  • Ster
Published: May 22, 2026

CVE-2026-34911

7.7
    Ubnt
  • Unifi Os
Published: May 22, 2026

CVE-2026-4834

7.5
    Wordpress
  • Wp Erp Pro
Published: May 22, 2026

CVE-2026-8679

7.5
    Wordpress
  • Audioigniter
Published: May 22, 2026

CVE-2026-9011

7.5
    Ditty
  • Ditty
Published: May 22, 2026

CVE-2026-9053

6.9
    Mothra
  • Mothra
Published: May 22, 2026

CVE-2026-7509

6.4
    Wordpress
  • Kiasubtitle
Published: May 22, 2026

CVE-2026-9104

6.4
    Wordpress
  • Draft List
Published: May 22, 2026

CVE-2026-3481

6.1
    Wordpress
  • Wp Blockade
Published: May 22, 2026

CVE-2026-6864

6.1
    Wordpress
  • Cbx 5 Star Rating And Review
Published: May 22, 2026

CVE-2026-44409

5.7
    Zte
  • Mu5250
Published: May 22, 2026

CVE-2026-25607

5.7
    Ster
  • Software
Published: May 22, 2026

CVE-2026-7798

5.4
    Wordpress
  • Fluentcrm
Published: May 22, 2026

CVE-2026-8381

5.4
    Teamviewer
  • Teamviewer Dex Platform
Published: May 22, 2026

CVE-2026-8684

5.3
    Motopress
  • Hotel Booking
Published: May 22, 2026

CVE-2026-2518

4.3
    Wordpress
  • Fastx
Published: May 22, 2026

CVE-2026-4070

4.3
    Wordpress
  • Alfie Feed Plugin
Published: May 22, 2026

CVE-2026-7249

4.3
    Wordpress
  • Location Weather Plugin
Published: May 22, 2026

CVE-2026-7615

4.3
    Wordpress
  • Widget Context Plugin
Published: May 22, 2026

CVE-2026-7636

4.3
    Soliloquy
  • Slider
Published: May 22, 2026

CVE-2026-8692

4.3
    Vedrixa
  • Forms
Published: May 22, 2026

CVE-2026-25608

2.3
    Ster
  • Ster
Published: May 22, 2026

CVE-2026-9264

None
    Sketchup
  • Sketchup
Published: May 22, 2026

CVE-2026-39827

None
    Golang
  • Ssh
Published: May 22, 2026

CVE-2026-39828

None
    Golang
  • Ssh
Published: May 22, 2026

CVE-2026-39829

None
    Golang
  • Go
Published: May 22, 2026

CVE-2026-39830

None
    Golang
  • Ssh
Published: May 22, 2026

CVE-2026-39831

None
    Openssh
  • Sk-Ecdsa-Sha2-Nistp256
  • Sk-Ssh-Ed25519
Published: May 22, 2026

CVE-2026-39832

None
    Golang
  • Golang
    Openssh
Published: May 22, 2026

CVE-2026-39833

None
    Golang
  • Keyring
Published: May 22, 2026

CVE-2026-39834

None
    Golang
  • Golang
Published: May 22, 2026

CVE-2026-39835

None
    Golang
  • Certchecker
  • Ssh Server
Published: May 22, 2026

CVE-2026-42508

None
    Golang
  • Signature Key
Published: May 22, 2026

CVE-2026-46595

None
    Golang
  • Go
Published: May 22, 2026

CVE-2026-46597

None
    Golang
  • Go
Published: May 22, 2026

CVE-2026-46598

None
    Golang
  • Ed25519
Published: May 22, 2026

CVE-2026-5072

None
    Zephyr
  • Ptp Subsystem
Published: May 22, 2026
Click here to see more Vulnerabilities