CVE-2026-48356

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

October 24, 2026

Last Seen

October 26, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

953 Magento Stores Infected by Deepveindrilling Malware Loader70.5

A criminal group has infected 953 online stores, primarily using Magento, with a JavaScript loader as part of an ongoing malware campaign since July 2025. The latest domain, deepveindrilling.com, was registered on October 6, 2026, and has been found in the CMS blocks of 83 stores. The loader checks...