CVE-2026-6854

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

October 6, 2026

Last Seen

October 6, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

New ClickFix Attack Uses Cache Smuggling to Deliver Malware54.9

Microsoft has identified a new ClickFix attack that exploits browser caches to deliver malware without traditional downloads. The attack involves compromised websites pre-fetching a script disguised as a PNG file into the browser cache. When victims are tricked into executing a command, the maliciou...