Skip to content

CVE-2026-120422

CVE

Threat entity extracted from intelligence sources

Frequency
3
occurrences
First Seen
November 4, 2026
Last Seen
November 4, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

ESET has reported that the SlippyNunchucks APT group is using a DNS hijacking operation to distribute DarkVigil malware through the Sogou Input Method, a popular Chinese input application. The attack exploits a vulnerability in the application’s branded vocabulary promotion mechanism, allowing the t...

Public Exploits

Checking GitHub for proof-of-concept code…