ctrlINT What the industry said about every indicator, with the quote

CVE-2014-6278Vulnerability

GNU Bash OS Command Injection Vulnerability

Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .

Reported by 2 independent sources · first reported by CISA advisories · last reported

Last reported 15 days ago

CISA KEVAdded 2 Oct 2025
Fix due 23 Oct 2025
Used by ransomware: not knownCISA KEV catalogue
EPSS99.6%
higher than 99% of CVEsFIRST EPSS, as of 21 Oct 2026

What the reports say

3 reports, newest first · the exact sentence from each

  1. “CVE-2014-6278 - GNU Bash operating system command injection vulnerability (aka Shellshock) (Added in October 2025)”

    The Hacker NewsNews
    Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies

  2. “CVE-2014-6278”

    The Hacker NewsNews
    FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails

  3. “CVE-2014-6278”

    CISA advisoriesGovernment
    Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data

Indicators reported together

named in the same reports
Copy these 7 indicators · defanged

Also named with it: CVE-2019-11510, CVE-2015-3306, CVE-2015-5477, CVE-2016-3081, CVE-2021-22205, CVE-2021-3199, CVE-2023-22894

Thanks — we review every report.

Report a wrong value
What is wrong with CVE-2014-6278 here?
No account needed. We do not store your IP address.