Custom AuraInspector Tool Exploits Salesforce Experience Cloud Misconfigurations

Custom AuraInspector Tool Exploits Salesforce Experience Cloud Misconfigurations

First seen 10 Mar 2026, 12:54 UTC Securityaffairs.Co 64.5

Article Content

Browse articles
ThreatCluster

Threat actors are conducting mass scans of Salesforce Experience Cloud sites using a modified AuraInspector tool to exploit misconfigurations and access sensitive data. Salesforce's Cyber Security Operations Center (CSOC) has issued a warning regarding this activity, highlighting the potential risks to organizations using the platform.

Timeline

2026-03-10
Salesforce CSOC warns of mass scanning using modified AuraInspector