CVE-2026-4387

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

June 2, 2026

Last Seen

June 2, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical StrongDM Vulnerability Enables Authentication Token Theft72.9

A critical vulnerability in StrongDM's desktop application, tracked as CVE-2026-4387, allows attackers to steal and reuse authentication tokens, potentially compromising sensitive enterprise infrastructure. Discovered by SpecterOps during a security assessment, this flaw affects StrongDM desktop and...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical StrongDM Vulnerability Enables Authentication Token Theft

Jun 2·2 sources

Related Entities

Data Breach StrongDM CWE-287 - Improper Authentication T1078 - Valid Accounts StrongDM CLI StrongDM Desktop

CVE-2026-4387

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Public Exploits

CVE Details

Related Clusters (1)

Critical StrongDM Vulnerability Enables Authentication Token Theft

Related Articles (2)

Critical StrongDM Vulnerability Allows Attackers to Steal and Reuse Authentication

Critical StrongDM Flaw Exposes Users to Authentication Token Theft and Reuse

Related Entities