CVE-2026-84115

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

September 2, 2026

Last Seen

September 4, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Serbian Activists Targeted by Advanced Spyware Ahead of Elections77.0

Since December 2025, at least 14 individuals in Serbia, including student activists and opposition politicians, have been targeted with advanced spyware, marking the largest documented wave of such surveillance in the country. The attacks coincide with local elections held on March 29, 2026, and are...

Critical Cleo Harmony Vulnerability Exploited for Privilege Escalation72.9

A newly discovered authentication bypass vulnerability in Cleo Harmony, tracked as CVE-2026-84115, allows remote attackers to escalate privileges by manipulating JWT refresh tokens. The flaw, found in the '/api/connections' function, enables attackers to bypass access controls through crafted HTTP h...