Vulnerabilities

CVSS

8.8 High

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Risk score

100.0

Known exploited

CISA KEV

Published

2026-02-10

Status

Published

Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network.

Weaknesses

CWE-693

Coverage 2

threat-intel

Exposed Server Reveals AI-Assisted Phishing Toolkit Behind WebDAV Malware Campaign

A cybercriminal, utilizing AI coding tools and a sophisticated pipeline, exposed a comprehensive phishing toolkit targeting Mexican users and beyond. The operator, likely leveraging LLMs and tools like Coderrr, created a…

The Hacker News · Jul 20, 2026 High

CVE-2025-33053CVE-2026-21513CVE-2025-24054MXUSDEphishingwebdavai

threat-intel

Exploits and vulnerabilities in Q1 2026

This Securelist report analyzes vulnerability trends and exploitation activity during Q1 2026, focusing on the expansion of exploit kits targeting Microsoft Office, Windows, and Linux operating systems. The report highli…

Securelist · May 7, 2026 High

CVE-2018-0802CVE-2017-11882CVE-2017-0199USvulnerabilityexploitationrce

All articles mentioning it

Advisories and references

• msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21513
• cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-...
• vicarius.io/vsociety/posts/cve-2026-21513-detection-script-security-...
• vicarius.io/vsociety/posts/cve-2026-21513-mitigation-script-security...