Skip to content

CVE-2020-1938

CVE

Threat entity extracted from intelligence sources

Frequency
7
occurrences
First Seen
June 17, 2026
Last Seen
October 12, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

CyberXero, a Russian-speaking initial access broker, has launched a dual-pronged campaign targeting WordPress sites and Ukrainian critical infrastructure, leveraging AI tools like Claude Code. The operation has led to the exfiltration of over 628,000 records from Ukrainian entities, with confirmed c...

Recent cybersecurity tools have emerged that exploit vulnerabilities in Apache Tomcat, specifically CVE-2017-12615 and CVE-2020-1938. The TomcatScanPro tool, released on September 19, 2026, allows users to check for weak passwords and exploit CVE-2017-12615, which has been actively exploited since i...

Public Exploits

Checking GitHub for proof-of-concept code…