Storia in 3 fonti

Hackers Exploited KnowledgeDeliver Zero-Day for Web Shell Deployment

CVE-2026-5426, a hardcoded ASP.NET machineKey in KnowledgeDeliver, was exploited as a zero-day in ViewState deserialization attacks.

Raccontata da

thehackernews.com

securityweek.com

bleepingcomputer.com

Confronto fonti

3 prospettive sulla stessa storia

AI · summaries

securityweek.comStai leggendo3 mesi fa

Hackers Exploited KnowledgeDeliver Zero-Day for Web Shell Deployment

CVE-2026-5426, a hardcoded ASP.NET machineKey in KnowledgeDeliver, was exploited as a zero-day in ViewState deserialization attacks.

originale

bleepingcomputer.com3 mesi fa

KnowledgeDeliver flaw exploited as a zero-day to install web shells

Hackers exploited a critical zero-day vulnerability in a server running the KnowledgeDeliver learning management system (LMS) to deploy the Godzilla web shell.

Leggi questa versione → originale

Timeline cronologica

martedì 26 maggio 2026·thehackernews.com
KnowledgeDeliver LMS Flaw Exploited to Deploy Godzilla and Cobalt Strike
CVE-2026-5426 enabled KnowledgeDeliver LMS attacks before February 24, 2026, leading to Cobalt Strike infections.
martedì 26 maggio 2026·securityweek.com
Hackers Exploited KnowledgeDeliver Zero-Day for Web Shell Deployment
CVE-2026-5426, a hardcoded ASP.NET machineKey in KnowledgeDeliver, was exploited as a zero-day in ViewState deserialization attacks.

Hackers Exploited KnowledgeDeliver Zero-Day for Web Shell Deployment

KnowledgeDeliver flaw exploited as a zero-day to install web shells

Timeline cronologica

KnowledgeDeliver LMS Flaw Exploited to Deploy Godzilla and Cobalt Strike

Hackers Exploited KnowledgeDeliver Zero-Day for Web Shell Deployment

KnowledgeDeliver LMS Flaw Exploited to Deploy Godzilla and Cobalt Strike

KnowledgeDeliver flaw exploited as a zero-day to install web shells