CVE-2026-4047

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

April 29, 2026

Last Seen

April 29, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Qinglong Task Scheduler Vulnerabilities Exploited for Cryptomining Attacks72.6

In early February 2026, hackers exploited two critical authentication bypass vulnerabilities in the Qinglong task scheduling platform, affecting versions 2.20.1 and earlier. These vulnerabilities, identified as CVE-2026-3965 and CVE-2026-4047, allowed unauthenticated remote code execution, enabling...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Qinglong Task Scheduler Vulnerabilities Exploited for Cryptomining Attacks

Apr 29·6 sources

Related Entities

Malware CVE-2026-3965 CWE-287 - Improper Authentication CWE-78 - OS Command Injection CWE-862 - Missing Authorization T1053 - Scheduled Task/Job T1059.004 - Unix Shell Express.js Linux MacOS Curl Docker

CVE-2026-4047

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Public Exploits

CVE Details

Related Clusters (1)

Qinglong Task Scheduler Vulnerabilities Exploited for Cryptomining Attacks

Related Articles (1)

Snyk researchers explain

Related Entities