CVE-2026-13165

CVE

Threat entity extracted from intelligence sources

Frequency

3

occurrences

First Seen

June 29, 2026

Last Seen

June 29, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical RCE Vulnerability Discovered in SzafirHost Software74.0

CERT Polska disclosed CVE-2026-13165, a high-severity remote code execution flaw in Krajowa Izba Rozliczeniowa's SzafirHost software, affecting all versions prior to 1.2.2. The vulnerability stems from inconsistent parsing of signed native library archives, allowing attackers to insert malicious DLL...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical RCE Vulnerability Discovered in SzafirHost Software

Jun 29·3 sources

Related Articles (3)

Cert Polska Advisories Jun 1, 2026 Vulnerability in SzafirHost software | CERT Polska cert.pl Open source

cert.pl·Jun 29

Cvefeed High Severity Advisories Jun 29, 2026 CVE-2026-13165 - Remote Code Execution in SzafirHost cvefeed.io Open source

cvefeed.io·Jun 29

SzafirHost RCE Lets Forged Native Libraries Bypass Signature Checks

Mallory.Ai·Jun 29

Related Entities

Remote Code Execution Zero-day Exploit CERT Polska CWE-94 - Code Injection T1203 - Exploitation for Client Execution