Incomplete security patches rose about eightfold in 2026
KEV fixes were later reported broken about four times as often as other fixes from the same vendors.
64
Product
Roundcube
- Mentions · 7d0
- Mentions · 30d1
- All mentions3
- First seenAug 12, 2026
- Last mentioned10d ago
Timeline
3 articles · newest firstLazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor
Lazarus exploits Windows AFD.sys zero-day CVE-2026-68820 in Operation Dream Job to deploy Troy backdoor at defense firms.
78
Lazarus hackers pair fake job offers with Windows zero-day exploit
Lazarus' Operation Dream Job targets the defense sector with fake job offers, a Windows LPE zero-day (CVE-2026-68820), and new Troy and RelayShell backdoors.
82
Related CVEs
by mentions- CVE-2025-4911399%8.8Authenticated PHP Object Deserialization RCE in Roundcube Webmail
- CVE-2026-68820<1%7.0Use-After-Free Local Privilege Escalation in Microsoft Windows WinSock AFD Driver
- CVE-2026-2151061%8.8Security Feature Bypass in Microsoft Windows Shell Actively Exploited (CVE-2026-21510)
- CVE-2026-3220271%4.3Spoofing Flaw in Windows Shell (CVE-2026-32202) Actively Exploited
- CVE-2026-35540<1%6.5An issue was discovered in Roundcube Webmail 1.6.0 before 1.6.14
Appears with
- Microsoftvendor · 3
- MISTPENmalware · 2
- Check Pointvendor · 2
- SecurityPDFproduct · 2
- Windowsproduct · 2
- Troymalware · 2
- RelayShellmalware · 2
- UAC-0145threat actor · 1
- CISAorganization · 1
- Enveilvendor · 1
- Windows Shellproduct · 1
- CERT-UAorganization · 1
- defense sectorvictim · 1
- Lockheed Martinvendor · 1
- ForestTigermalware · 1
- Enveilorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.