Exploit / PoChighExploited in the wild

CISA Adds 4 Exploited Flaws to KEV, Sets May 2026 Federal Deadline

The Hacker Newsby @TheHackersNewsApr 26, 2026 · 08:06 UTC (Apr 26, 2026)2 min read4 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2024-57726 CVE-2024-57728 CVE-2024-7399 CVE-2025-29635

Tags: cve-2024-57726 cve-2024-57728 cve-2024-7399 cve-2025-29635 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2024-57726 +1 related CVE CVE-2024-57728	Missing-Authorization Privilege Escalation in SimpleHelp Remote Support <= 5.5.7	9.9 group max	66%	KEVRansomware	Jan 15, 2025 KEV Apr 24, 2026
CVE-2024-7399	Unauthenticated Path Traversal File Write in Samsung MagicINFO 9 Server	9.8	92%	KEV	Aug 12, 2024 KEV Apr 24, 2026
CVE-2025-29635	Authenticated Command Injection in D-Link DIR-823X Routers Exploited by Mirai Botnet	7.2	88%	KEVPoC ×2	Mar 25, 2025 KEV Apr 24, 2026

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Apr 25, 2026 Network Security / Infrastructure Security The U. S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added four vulnerabilities impacting SimpleHelp, Samsung MagicINFO 9 Server, and D-Link DIR-823X series routers to its Known Exploited Vulnerabilities ( KEV ) catalog, citing evidence of active exploitation.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.