Skip to content

CVE-2026-6807

CVE

Threat entity extracted from intelligence sources

Frequency
3
occurrences
First Seen
April 29, 2026
Last Seen
April 29, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

CISA Warns of Data-Theft Vulnerability in NSA's GrassMarlin Tool54.9

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding a vulnerability in GrassMarlin, a tool developed by the NSA, which could allow attackers to access sensitive information. This vulnerability, identified as CVE-2026-6807, affects all versions of GrassMarlin, w...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

Data BreachPhishingCWE-611 - Improper Restriction Of XML External Entity Reference (xxe)T1041 - Exfiltration Over C2 ChannelT1566 - PhishingT1567 - Exfiltration Over Web ServiceJavaXMLGrassMarlin