Skip to content

CVE-2026-4020

In 1 brief, most recently 21 June 2026. RSS for this tag

Published 2026-03-31

Learn more: DanSec Explorer ↗ NVD ↗ CVE.org ↗ CISA KEV ↗

Not on CISA's known exploited list as of 2026-11-04.

Coverage in DanSec Daily

Sun 21 Jun Gravity SMTP WordPress plugin flaw (CVE-2026-4020) exploited, Madison Square Garden breach claimed, Sapphire Sleet linked to Mastra npm supply chain attack.