Knuckleball Malware — Analysis, Campaigns & Threat Activity

Threat entity extracted from intelligence sources

Frequency

1

occurrences

First Seen

September 2, 2026

Last Seen

September 2, 2026

Related Threat Clusters

SonicWall SMA1000 Zero-Day Vulnerabilities Under Active Exploitation
SonicWall has patched two critical zero-day vulnerabilities in its SMA1000 VPN appliances, CVE-2026-83548 and CVE-2026-83549, which are actively being exploited in the wild. CVE-2026-83548 is a pre-authentication SSRF…

4 articles · Updated September 2, 2026

Recent Intelligence Reports

SonicWall Patches Two New Actively Exploited Zero — Securityaffairs.Co · September 2, 2026

Related Entities

Zero-day Exploit CVE-2026-15409 CVE-2026-15410 CVE-2026-83548 CVE-2026-83549 CWE-78 - OS Command Injection Cwe-918 - Server-Side Request Forgery (ssrf) T1059 - Command and Scripting Interpreter T1190 - Exploit Public-Facing Application SMA 1000 VPN Appliances Python