Skip to content
cve — cve-2026-102785

grep -rl "CVE-2026-102785" ./articles

CVE-2026-102785

CVE-2026-102785 was patched on 21 October. Unit 42 watched automated webshell drops two days later, each validated in seconds and followed by a person. A mass-exploit tool is already public, and the flaw is not on CISA's catalogue.

1 article — 2026-10-28
NOT IN CISA KEV — CATALOG 2026.10.27

Authoritative record

Root Notes reports on this identifier; it does not maintain it. For the vendor advisory, the affected versions and the scoring, NVD and MITRE hold the primary records.

Not listed in CISA's Known Exploited Vulnerabilities catalog as of catalog 2026.10.27. That is not evidence it is not being exploited — the catalog records what CISA has confirmed, and identifiers have been attacked for days before appearing in it.

Our coverage

../cve — every identifier we have covered