DanSec

Vulnerability

CVE-2026-3854

In 2 briefs, most recently 30 April 2026. RSS for this tag

Published 2026-03-10

Learn more: DanSec Explorer ↗ NVD ↗ CVE.org ↗ CISA KEV ↗

Not on CISA's known exploited list as of 2026-11-04.

Coverage in DanSec Daily

  1. The TeamPCP SAP npm supply chain attack, Checkmarx GitHub data theft, and a five-year dormant WordPress plugin backdoor affecting 70,000+ sites.
  2. The Vimeo breach via Anodot, LAPSUS$ leaking Checkmarx data, and the critical GitHub RCE flaw CVE-2026-3854.