Apache Axis

Search everything

Mentions · 7d2
Mentions · 30d2
All mentions2
First seenNov 12, 2026
Last mentioned5h ago

Timeline

2 articles · newest first

N-able N-central zero-day exploited hours after public PoC

Huntback says at least 21 production servers, 19 on the latest update, were mined after the public exploit.

BleepingComputerNov 12, 19:51 UTC · 5h agoExploit / PoCExploited15 sourcesCVE-2026-904361

New N-central PoCs bypass the November patch for root and SYSTEM access

4EverAble2Shell and Agent2Shell hit on-prem 2026.4.1 HF2 when Legacy API is public; hosted N-central is unaffected.

The Hacker Newsupdated Nov 12, 19:51 UTC · 5h agofirst Nov 12, 11:51 UTC · 13h agoExploit / PoC 15 sourcesCVE-2026-904361

Related CVEs

by mentions

CVE-2026-90436<1%9.8
Unauthenticated RCE in Apache Axis 1.x via SOAP fault
published 6d agoApache AxisPoC

Appears with

N-centralproduct · 2
Previdianorganization · 2
Apachevendor · 2
N-ablevendor · 2
XMRigmalware · 1
Huntbackorganization · 1
watchTowrorganization · 1

Entities are extracted by the model from each article. First seen Nov 12, 2026, last mentioned 5h ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.