CVE-2026-39364

CVE

Threat entity extracted from intelligence sources

Frequency

5

occurrences

First Seen

September 11, 2026

Last Seen

September 15, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Mass Scanning Campaign Targets Exposed Vite Servers for Cloud Credentials72.9

In August 2026, a mass-scanning campaign targeted internet-exposed Vite development servers to steal sensitive cloud credentials and configuration files from AWS and Azure. The attackers exploited CVE-2026-39364, a high-severity vulnerability allowing unauthenticated access to restricted files via m...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Mass Scanning Campaign Targets Exposed Vite Servers for Cloud Credentials

1d ago·9 sources

Related Articles (5)

BleepingComputer

www.bleepingcomputer.com·4h ago

Exposed Vite servers are being probed for AWS and Azure credentials

Infoworld·5h ago

Mass

Thehackernews·7h ago

Hackers target exposed Vite dev servers to steal AWS, Azure secrets

Bleepingcomputer·1d ago

Cloud Takeover: Mass Scanning for Exposed Vite Endpoints (CVE-2026-39364)

Related Entities

Data Breach Azure AWS Google Cloud Platform Amazon Web Services Microsoft Azure Belgium Netherlands United States Singapore Taiwan CWE-200 - Exposure of Sensitive Information