Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control...
Dell has disclosed a critical vulnerability (CVE-2026-86360) in its System Update (DSU) tool, affecting versions prior to 2.3.0.0. This path traversal flaw allows unauthenticated remote attackers to execute arbitrary code with root privileges on vulnerable PowerEdge servers. The vulnerability has a...
A Chinese state-backed hacking group, UNC6201, has been exploiting a critical zero-day vulnerability in Dell RecoverPoint for Virtual Machines since at least mid-2024. The flaw, tracked as CVE-2026-22769, features a maximum severity rating due to hardcoded credentials, allowing unauthorized access t...
Dell has issued security updates for six critical vulnerabilities in its Container Storage Modules (CSM) that could enable unauthenticated attackers to gain administrative access to storage backends and root control over Kubernetes clusters. The vulnerabilities, tracked as CVE-2026-63688 and CVE-202...
