CVE-2026-51990

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

September 11, 2026

Last Seen

November 4, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

China-Aligned Hackers Exploit Tencent's Sogou Flaw for Backdoor Deployment78.0

A critical vulnerability (CVE-2026-51990) in Tencent's Sogou Input Method for Windows has been exploited by the China-linked UNC3569 threat group to deploy the GrayRabbit backdoor. The flaw allows for one-click remote code execution via crafted links, affecting hundreds of millions of users. The att...

SlippyNunchucks Exploits Sogou Input Method to Distribute DarkVigil Malware63.9

ESET has reported that the SlippyNunchucks APT group is using a DNS hijacking operation to distribute DarkVigil malware through the Sogou Input Method, a popular Chinese input application. The attack exploits a vulnerability in the application’s branded vocabulary promotion mechanism, allowing the t...