Vulnerabilities CVE-2026-17032

CVE-2026-17032

Critical

Open

TLP:CLEAR

Supsystic Multiple Pro Plugins - Backdoor via Compromised Vendor Update Server

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Multiple Supsystic Pro plugins were distributed with malicious code through the vendor's compromised update server, allowing unauthenticated attackers to deploy a second-stage payload that exfiltrates credentials and other sensitive data and grants full control of affected sites.

Details

CVSS Score: 9.8
EPSS Score ⓘ: 0.37%

30.1th percentile
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Confidence: 90%
Published: Aug 6, 2026
Last Modified: Aug 7, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.