KnowledgeDeliver LMS Flaw Exploited to Deploy Godzilla and Cobalt Strike

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-05-26 05:19 UTC
  • Importiert: 2026-06-03 20:03 UTC
  • CVSS: 7.5
  • Quelle-ID: thn_global
  • uid_hash: 54a8b32221837e05bc7059de66d623301e4210bc89226a36ed1a01e69ff4a921
The Hacker News

Inhalt

A now-patched high-severity security flaw affecting Digital Knowledge KnowledgeDeliver, a Learning Management System (LMS) popular in Japan, was exploited as a zero-day to deliver the Godzilla web shell and ultimately facilitate the deployment of Cobalt Strike Beacon.

The vulnerability, tracked as CVE-2026-5426 (CVSS score: 7.5), stems from the use of hard-coded ASP.NET machine keys, leading to

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-5426

HIGH

7.5

HIGH

7.5

2026-04-16

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

 security_news - de https://feeds.feedburner.com/TheHackersNews
Zurueck zur Eintrags-Liste