CVE-2026-5426 - Vulnerability Details

Related Threat Clusters

• Critical BadHost Vulnerability Exposes AI Applications to Authentication Bypass

  A severe vulnerability known as BadHost (CVE-2026-48710) has been identified in the Starlette framework, affecting millions of AI applications, including those built on FastAPI. This flaw allows unauthenticated…

  16 articles · Updated May 26, 2026
• Critical RCE Vulnerability in KnowledgeDeliver LMS Exploited by Hackers

  In late 2025, a critical vulnerability (CVE-2026-5426) was discovered in the KnowledgeDeliver Learning Management System, allowing unauthenticated remote code execution via ViewState deserialization. This flaw, stemming…

  16 articles · Updated May 25, 2026

Recent Intelligence Reports

• Risky Bulletin: BadHost vulnerability bypasses authentication on AI infrastructure — News.Risky.Biz · May 27, 2026
• 5435 — www.cybersecurity-help.cz · May 26, 2026
• Active Exploitation of CVE-2026-5426 in KnowledgeDeliver LMS Enables Godzilla ... — Rescana · May 26, 2026
• Hackers Abuse KnowledgeDeliver LMS Flaw to Install BLUEBEAM Web Shell — Gbhackers · May 26, 2026
• KnowledgeDeliver LMS Zero — Cybersecuritynews · May 25, 2026
• Exploitation of KnowledgeDeliver via ViewState Deserialization Vulnerability — Mandiant · May 25, 2026

Related Entities