Skip to content

CVE-2025-26399

CVE

Threat entity extracted from intelligence sources

Frequency
6
occurrences
First Seen
January 28, 2026
Last Seen
June 26, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

The US Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding active exploitation of vulnerabilities in Ivanti Endpoint Manager, SolarWinds Web Help Desk, and VMware Workspace ONE. The vulnerabilities include CVE-2025-26399, CVE-2026-1603, and CVE-2021-22054, all of w...

The Anubis ransomware group launched a cyberattack on the Adriatic Port Authority, crippling operations and causing significant disruptions in maritime logistics. The attack, attributed to Anubis in January 2026, reportedly began on December 11, 2025, and resulted in a $10 million Bitcoin ransom dem...

Users of SolarWinds Web Help Desk are at risk due to the active exploitation of vulnerability CVE-2025-40551. This vulnerability was published on January 28, 2026, and was added to CISA's Known Exploited Vulnerabilities Catalog on February 3, 2026, requiring federal civilian agencies to implement pa...

Public Exploits

Checking GitHub for proof-of-concept code…