Frequency
2
occurrences
First Seen
March 18, 2026
Last Seen
March 19, 2026
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—
Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
A malicious campaign has exploited vulnerable OpenWebUI servers, turning them into a network of cryptocurrency mining machines and information stealers. The campaign has been active since late 2024, affecting thousands of publicly accessible OpenWebUI instances due to weak security settings and misc...
Public Exploits
Checking GitHub for proof-of-concept code…
