CVE-2026-28496

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

June 26, 2026

Last Seen

June 26, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical SSTI Vulnerability in FOSSBilling Exposes Databases to RCE Attacks78.0

A critical server-side template injection (SSTI) vulnerability in FOSSBilling, tracked as CVE-2026-28496, was disclosed on June 23, 2026. This flaw affects all versions up to 0.7.2 and allows attackers to exploit unsafe Twig template rendering, leading to full database compromise and remote code exe...

State Actors Target Water Systems Amid Weak Cyber Defenses75.5

Water and wastewater systems are increasingly targeted by Russia, China, and Iran due to poor operational technology defenses. Exposed human-machine interfaces and programmable logic controllers create vulnerabilities that can be exploited for disruption. U.S. agencies have noted a shift towards sta...