DanSec

Vulnerability

CVE-2026-26980

In 2 briefs, most recently 26 May 2026. RSS for this tag

Published 2026-02-20

Learn more: DanSec Explorer ↗ NVD ↗ CVE.org ↗ CISA KEV ↗

Not on CISA's known exploited list as of 2026-11-04.

Coverage in DanSec Daily

  1. 7-Eleven breach by ShinyHunters, Ghost CMS CVE-2026-26980 exploited for ClickFix attacks on 700+ sites, and TeamPCP supply chain campaign reaching GitHub.
  2. Megalodon attack compromises 5,500+ GitHub repos; Ghost CMS SQL injection CVE-2026-26980 actively exploited; TrapDoor hits npm, PyPI, Crates.io.