CVE-2026-92001: Apache Sling XSS: Missing parser resource limits
Apache Sling XSS before 2.4.12 has an XML entity expansion vulnerability (CVE-2026-92001).
40
Malware
Trickbot
- Mentions · 7d0
- Mentions · 30d0
- All mentions6
- First seenAug 17, 2026
- Last mentionedSep 23, 2026
Timeline
6 articles · newest firstRyuk ransomware operator gets 2-year sentence after extorting victims for $1.2 million
A Ryuk ransomware operator was sentenced to 2 years in prison for extorting over $1.2 million from victims.
65
Ryuk ransomware operator gets 2-year sentence after extorting victims for $1.2 million
An Armenian Ryuk operator received a two-year U.S. prison sentence and $1.2 million in victim restitution.
60
TrickBot Campaign Uses Fake Payroll Emails to Conduct Phishing Attacks
TrickBot phishing campaign used SendGrid, fake Google Docs, and Drive-hosted downloaders disguised as Word files to deliver a credential-stealing payload.
50
Threat Assessment: Ryuk Ransomware
Unit 42 assesses Ryuk ransomware amid a CISA/FBI/HHS alert on threats to U.S. healthcare, including the UHS attack that disrupted hospital operations.
68
Threat Assessment: Egregor Ransomware
Unit 42 assesses Egregor ransomware, a Sekhmet variant likely run by former Maze affiliates using Qakbot, IcedID, and Ursnif for initial access.
55
Related CVEs
by mentions- XML Entity Expansion Flaw in Apache Sling XSS Library Before 2.4.12
Appears with
- Ryukmalware · 4
- Universal Health Servicesvictim · 4
- FBIorganization · 4
- Palo Alto Networksvendor · 3
- Unit 42organization · 3
- Ryukthreat actor · 3
- Cortex XDRproduct · 3
- Palo Alto Networksorganization · 2
- GPT-6 Astraai model · 1
- PERISMOUNT LIMITEDorganization · 1
- Ursnifmalware · 1
- Universal Health Servicesorganization · 1
- Qakbotmalware · 1
- U.S. Department of Justiceorganization · 1
- Apache Sling XSSproduct · 1
- Apache Software Foundationorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.