Malwaremedium

PCPJack Credential Stealer Exploits 5 CVEs to Spread Worm

The Hacker Newsby @TheHackersNewsMay 7, 2026 · 17:45 UTC (May 7, 2026)3 min read2 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2025-55182 CVE-2025-29927 CVE-2026-1357 CVE-2025-9501 CVE-2025-48703

Tags: cve-2025-29927 cve-2025-48703 cve-2025-55182 cve-2025-9501 cve-2026-1357 malware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-29927	Middleware Authorization Bypass in Vercel Next.js (CVE-2025-29927)	9.1	99%	PoC ×4	Mar 21, 2025
CVE-2025-48703	Unauthenticated OS Command Injection RCE in CWP Control Web Panel	9.0	100%	KEVPoC	Sep 19, 2025 KEV Nov 4, 2025
CVE-2025-55182	Unauthenticated RCE in React Server Components (React2Shell)	10.0	100%	KEVRansomwarePoC ×13	Dec 3, 2025 KEV Dec 5, 2025
CVE-2025-9501	Unauthenticated Command Injection in W3 Total Cache WordPress Plugin	9.0	20%		Nov 17, 2025
CVE-2026-1357	Unauthenticated RCE in WPvivid Backup & Migration WordPress Plugin	9.8	33%		Feb 11, 2026

From the original article

3 min read at thehackernews.com

 Ravie Lakshmanan  May 07, 2026 Threat Intelligence / Cloud Security Cybersecurity researchers have disclosed details of a new credential theft framework dubbed PCPJack that targets exposed cloud infrastructure and ousts any artifacts linked to TeamPCP from the environments.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.