Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
In August 2026, a mass-scanning campaign targeted internet-exposed Vite development servers to steal sensitive cloud credentials and configuration files from AWS and Azure. The attackers exploited CVE-2026-39364, a high-severity vulnerability allowing unauthenticated access to restricted files via m...
In September 2026, the Langflow AI application-building platform faced significant exploitation attempts targeting CVE-2026-0768, an unauthenticated remote code execution vulnerability. F5 Labs reported 405 requests from 55 distinct source IPs, indicating a coordinated effort to exploit this flaw. T...
Cybersecurity researchers report a rise in attacks targeting PHP servers, IoT devices, and cloud gateways. Botnets like Mirai, Gafgyt, and Mozi are exploiting known vulnerabilities and cloud misconfigurations to expand their reach. With PHP powering a significant portion of websites, the threat to t...
Cybersecurity researchers report a significant increase in attacks on PHP servers, IoT devices, and cloud gateways, driven by botnets such as Mirai, Gafgyt, and Mozi. These botnets exploit known vulnerabilities and cloud misconfigurations to expand their control over network resources. With PHP powe...
