CVE-2022-41082 (ProxyNotShell): Exchange Server Vulnerability Used in StrikeShark
CVE-2022-41082 is a remote code execution vulnerability in Microsoft Exchange Server, part of the ProxyNotShell attack chain. It was exploited in StrikeShark.
Category: Critical CVEs
Critical and exploited CVEs, vulnerability intelligence and remediation guidance.
CVE-2023-46747: F5 BIG-IP Vulnerability Weaponized in StrikeShark
CVE-2023-46747 is a critical vulnerability in F5 BIG-IP that allows remote code execution. It was exploited in the StrikeShark campaign.
CVE-2024-21762: Fortinet FortiOS Flaw Used in StrikeShark
CVE-2024-21762 is a vulnerability in Fortinet FortiOS that allows remote code execution. It was exploited in the StrikeShark campaign.
CVE-2025-55182: React2Shell Vulnerability
A remote code execution vulnerability in React applications, used as a lure in the ChocoPoC campaign.
CVE-2022-40684: Fortinet FortiOS Authentication Bypass Used in StrikeShark
CVE-2022-40684 is an authentication bypass vulnerability in Fortinet FortiOS. It was exploited in the StrikeShark campaign.
CVE-2023-20198: Cisco IOS XE Web UI Vulnerability Used in StrikeShark
CVE-2023-20198 is a critical vulnerability in Cisco IOS XE Web UI that allows remote code execution. It was exploited in the StrikeShark…
CVE-2026-54636 — Critical vulnerability brief
CVSS 9Dokku is a docker-powered PaaS. Prior to 0.38.7, the cron plugin utilizes commands in the app.json file to manage system cron running…
Amazon Q Developer Flaw Could Let Malicious Repos Run Code via MCP Configs
A high-severity flaw in Amazon Q Developer could allow a malicious repository to execute commands and steal a developer's cloud credentials. The…
CVE-2026-12957 — Vulnerability brief
CVE-2026-12957 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
CVE-2026-12958: Amazon Q Developer Symlink Vulnerability
A vulnerability in Amazon Q Developer Language Server 1.69.0 and earlier allows malicious repositories to use symlinks to write to sensitive files…