Exploit / PoChighExploited in the wild

U.S. CISA adds Daemon Tools, TanStack, and Nx Console flaws to its Known Exploited Vulnerabilities catalog

Security Affairsby @securityaffairsMay 28, 2026 · 13:14 UTC (May 28, 2026)2 min read4 · 2 reads

Read at securityaffairs.com

Analyze CVE-2026-8398 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2026-8398 CVE-2026-45321 CVE-2026-48027

Tags: cve-2026-45321 cve-2026-48027 cve-2026-8398 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2026-45321	Supply chain compromise: credential-stealing code in 42 @tanstack/* npm packages	9.6	3%	KEVRansomwarePoC ×2	May 12, 2026 KEV May 27, 2026
CVE-2026-48027	Malicious Code Embedded in Nx Console VS Code Extension 18.95.0	9.3	2%	KEVRansomwarePoC	May 27, 2026 KEV May 27, 2026
CVE-2026-8398	Trojanized Installer Backdoor in DAEMON Tools Lite (Supply Chain Compromise)	9.3	1%	KEVPoC	May 15, 2026 KEV May 27, 2026

From the original article

2 min read at securityaffairs.com

U. S. Cybersecurity and Infrastructure Security Agency (CISA) adds Daemon Tools, TanStack, and Nx Console flaws to its Known Exploited Vulnerabilities catalog.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.