CVE-2026-1731

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

February 7, 2026

Last Seen

September 2, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

China-Linked QTFY Group Targets Critical Infrastructure with Advanced Exploits80.8

The Joint Cybersecurity Advisory JCSA-20260826-01, released on August 26, 2026, details ongoing activities by the China-linked hacking group QTFY, attributed to Nanjing Xinjiuwei Network Technology Co. Active since 2018, QTFY employs platforms like QScan and QTRouter to exploit vulnerabilities in cr...

Exploitation of Bomgar RMM Vulnerability Triggers LockBit Ransomware Surge72.6

A critical remote code execution vulnerability (CVE-2026-1731) in Bomgar's remote monitoring and management (RMM) tool has led to a significant increase in cyberattacks, particularly involving LockBit ransomware. The flaw, which allows unauthenticated attackers to execute arbitrary commands, was pub...

GreyNoise Report Reveals Early Warning Signals for Edge Device Vulnerabilities72.6

GreyNoise Intelligence has released a report indicating that spikes in malicious activity often precede the disclosure of new vulnerabilities in edge devices. The study tracked 147.8 million sessions over 103 days, identifying 68 activity surges that correlated with vendor-specific CVE disclosures....

Attackers Exploit Trusted Tools in Cyber Campaigns71.0

ReliaQuest's analysis reveals a significant rise in cyberattacks utilizing trusted tools and user behavior manipulation from December to February. The report identifies BaoLoader as the leading malware, involved in 40.9% of incidents, primarily through drive-by compromises disguised as legitimate so...