data_types_exposed:credentials × has_exploit:true × cves:CVE-2026-9082 × criticity:critical × limpar

Resultados

2 casos · pág. 1/1

f5.com · há 3d exploit público critical

Drupal Core CVE-2026-9082 JSON:API pre-auth SQL injection actively exploited within days of disclosure

CVE-2026-9082 is a critical (CVSS 9.8) pre-authentication SQL injection in the JSON:API module of Drupal Core. It was published on May 20, 2026 and added to the CISA KEV catalog the same month, with a remediation deadline of May 27. F5 sensors recorded 576 exploitation attempts from 9 source IPs between May 20 and May 31, 2026. The earlie…

CVE-2026-9082

thehackernews.com · há 2h exploit público critical

Russian-Speaking INC and The Gentlemen Ransomware Affiliates Use Phantom AI Agent Framework to Breach 62 Organizations

SOCRadar researchers analyzed an exposed directory at 45.227.254.43 that revealed an AI-driven intrusion ecosystem run by affiliates of the INC and The Gentlemen ransomware groups. It is centered on an "Autonomous Red Team Kill Chain Framework" called Phantom. The actor is assessed to be Russian-speaking and acts both as an intrusion and …

CVE-2024-57727 CVE-2026-35616 CVE-2026-41940 INC The Gentlemen industrial manufacturing