Skip to content

CVE-2023-43770

CVE

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
July 23, 2026
Last Seen
July 24, 2026
API
Exploited in Wild
Ransomware Use
Public Exploits
Attack Vector

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Since July 2025, Russian state-backed hackers, known as Laundry Bear, have exploited a zero-click vulnerability (CVE-2025-66376) in the Zimbra Collaboration Suite to infiltrate Western government and commercial organizations. This attack method allows hackers to steal sensitive data without requirin...

APT28 (Fancy Bear) has been linked to Operation Roundish, utilizing a comprehensive Roundcube exploitation toolkit against Ukrainian government targets. The toolkit, discovered in January 2026, includes XSS payloads, a command-and-control server, and various credential harvesting tools. The operatio...

Public Exploits

Checking GitHub for proof-of-concept code…