CVE-2026-48908 is a vulnerability tracked across 1 threat cluster and 4 intelligence report mentions on ThreatCluster. First observed July 1, 2026; most recent activity July 2, 2026.
A coordinated supply chain attack has been identified, targeting vulnerability researchers and penetration testers through malicious proof-of-concept (PoC) repositories on GitHub. The malware, named ChocoPoC, is a…