CVE-2026-86540

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

October 7, 2026

Last Seen

October 7, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

RCE Vulnerability in Knowns LSP Configuration67.5

An Arbitrary Code Execution (ACE) vulnerability, CVE-2026-86540, has been identified in the Knowns Language Server Protocol (LSP) detection pipeline. The flaw arises from the system's failure to validate the.binary field in the.knowns/config.json file, allowing execution of attacker-controlled binar...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

RCE Vulnerability in Knowns LSP Configuration

Oct 7·1 sources

Related Entities

Malware CWE-829 - Inclusion of Functionality from Untrusted Control Sphere T1059 - Command and Scripting Interpreter

CVE-2026-86540

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Public Exploits

CVE Details

Related Clusters (1)

RCE Vulnerability in Knowns LSP Configuration

Related Articles (1)

knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json

Related Entities