Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
CVEHighVerifiedSignal 69/100EPSS 90.8%
CVE-2026-41940
First Seen
Jun 3, 2026
Last Seen
Oct 9, 2026
Found in 7 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
CVE
Known vulnerability being actively exploited in the wild.
MISP Category
vulnerability
EPSS Score
90.76%
EPSS Percentile
99.6th
Confidence
79%
Signal Score
69 / 100
IDS Rule
No
CVE Intelligence
Exploit Probability90.76%
99.6th percentile of all CVEs
Threat Context
Feed Intelligence Summary
7 reports79% confidence
CP
Cyber Press
Oct 2, 2026
4 IOCs in report
CP
Cyber Press
Jul 27, 2026
CyberPress Weekly – Top 50 Cybersecurity Stories of the Week – Cl0p Windchill Zero-Day, Zimbra Attacks, 23M-User Breach, AI Exploits & More
3 IOCs in report
XL
XLab
May 11, 2026
15 IOCs in report
Activity Timeline
Oct 2May 11
Threat Activity Heatmap
· Peak: 2026-05-11LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
2
Minimal
3mo
3
Moderate
Threat ScoreMedium Risk
69
SIGNAL
Signal Score
79%
Confidence
7
Reports
First seenJun 3, 2026
Last seenOct 9, 2026
Verified IOC
VirusTotal
Not checked
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
highFirst detected 4 months ago · Last seen 3 days ago
Appeared in 7 threat reports from 7 sources
Associated with: Sandworm, APT44, Cl0p
Used by malware: Mirai, Medusa, WannaCry, META Stealer, Cl0p