KV-Botnet

Mentions · 7d1
Mentions · 30d1
All mentions1
First seenOct 28, 2026
Last mentioned2d ago

Timeline

1 articles · newest first

Volt Typhoon uses Silent Train relays for zero-day edge attacks

Black Lotus Labs says four confirmed zero-days hit VeloCloud, Cisco SD-WAN, N-central, and Versa Director.

BleepingComputerupdated 00:10 UTC · 23h agofirst Oct 28, 16:00 UTC · 2d agoThreat actorExploited14 sourcesCVE-2026-16812 CVE-2026-20127 CVE-2025-8875+21

Related CVEs

by mentions

CVE-2026-2012789%10.0
Authentication Bypass in Cisco Catalyst SD-WAN Controller, Manager, Validator
published Feb 25, 2026Cisco Catalyst SD-WAN Controller (formerly SD-WAN vSmart)KEV
CVE-2026-168122%10.0
OS Command Injection in Arista VeloCloud Orchestrator On-Prem
published Jul 27, 2026Arista VeloCloud Orchestrator On-PremKEV
CVE-2025-88764%9.4
OS Command Injection in N-able N-central Before 2025.3.1
published Aug 14, 2025N-able N-centralKEV
CVE-2025-88753%9.4
Insecure Deserialization Code Execution in N-able N-central (KEV)
published Aug 14, 2025N-able N-centralKEV
CVE-2024-397174%7.2
Unrestricted File Upload in Versa Networks Versa Director Exploited by Volt Typhoon
published Aug 22, 2024Versa Networks Versa DirectorKEV

Appears with

Cisco Catalyst SD-WANproduct · 1
Volt Typhoonthreat actor · 1
Netgearvendor · 1
Ciscovendor · 1
Silent Trainmalware · 1
Netgear Orbiproduct · 1
CISAorganization · 1
Questvendor · 1
N-ablevendor · 1
Lumenorganization · 1
N-able N-centralproduct · 1
VeloCloud Orchestratorproduct · 1
Black Lotus Labsorganization · 1
Intelbrasvendor · 1
NCSCorganization · 1
Versavendor · 1

Entities are extracted by the model from each article. First seen Oct 28, 2026, last mentioned 2d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.