CVE-2026-32202

Overview

Microsoft
Windows 10 Version 1607

14 Apr 2026

Published

24 Apr 2026

Updated

CVSS v3.1

MEDIUM (4.3)

EPSS

0.09%

MITRE

KEV

Description

Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network.

Statistics

1 Post

Last activity: 20 hours ago

Bluesky

piggo @pigondrugs.bsky.social

~Akamai~ An incomplete patch for APT28's CVE-2026-21510 leaves a zero-click NTLM authentication coercion flaw (CVE-2026-32202) via malicious LNK files. - IOCs: CVE-2026-32202, CVE-2026-21510, APT28 - #APT28 #CVE2026_32202 #ThreatIntel #ZeroDay

0
0
0
20h ago

CVE-2026-21510

Overview

Microsoft
Windows 10 Version 1607

10 Feb 2026

Published

10 Apr 2026

Updated

CVSS v3.1

HIGH (8.8)

EPSS

3.35%

MITRE

KEV

Description

Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

Statistics

1 Post

Last activity: 20 hours ago

Bluesky

piggo @pigondrugs.bsky.social

~Akamai~ An incomplete patch for APT28's CVE-2026-21510 leaves a zero-click NTLM authentication coercion flaw (CVE-2026-32202) via malicious LNK files. - IOCs: CVE-2026-32202, CVE-2026-21510, APT28 - #APT28 #CVE2026_32202 #ThreatIntel #ZeroDay

0
0
0
20h ago

CVE-2024-57726

Overview

Pending

15 Jan 2025

Published

25 Apr 2026

Updated

CVSS

Pending

EPSS

52.26%

MITRE

KEV

Description

SimpleHelp remote support software v5.5.7 and before has a vulnerability that allows low-privileges technicians to create API keys with excessive permissions. These API keys can be used to escalate privileges to the server admin role.

Statistics

1 Post

Last activity: 20 hours ago

Bluesky

piggo @pigondrugs.bsky.social

~Cisa~ CISA added 4 actively exploited CVEs affecting Samsung, SimpleHelp, and D-Link to the KEV catalog. - IOCs: CVE-2024-7399, CVE-2024-57726, CVE-2025-29635 - #CISA #KEV #ThreatIntel

0
0
0
20h ago

CVE-2024-7399

Overview

Samsung Electronics
MagicINFO 9 Server

09 Aug 2024

Published

25 Apr 2026

Updated

CVSS v3.1

HIGH (8.8)

EPSS

82.26%

MITRE

KEV

Description

Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attackers to write arbitrary file as system authority.

Statistics

1 Post

Last activity: 20 hours ago

Bluesky

piggo @pigondrugs.bsky.social

~Cisa~ CISA added 4 actively exploited CVEs affecting Samsung, SimpleHelp, and D-Link to the KEV catalog. - IOCs: CVE-2024-7399, CVE-2024-57726, CVE-2025-29635 - #CISA #KEV #ThreatIntel

0
0
0
20h ago