A 10.0 in a Joomla and WordPress template is being exploited by a scanner, with a human operator two minutes behind it
2026-10-28Security
CVE-2026-102785 was patched on 21 October. Unit 42 watched automated webshell drops two days later, each validated in seconds and followed by a person. A mass-exploit tool is already public, and the flaw is not on CISA's catalogue.