CVE-2020-0688Vulnerability
Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability
Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .
Reported by 1 independent source · first reported by Kaspersky Securelist · last reported
Last reported 1 month ago
CISA KEVAdded 3 Nov 2021
Fix due 3 May 2022
Used by ransomware: knownCISA KEV catalogue
Fix due 3 May 2022
Used by ransomware: knownCISA KEV catalogue
EPSS100.0%
higher than 99% of CVEsFIRST EPSS, as of 7 Oct 2026
higher than 99% of CVEsFIRST EPSS, as of 7 Oct 2026
What the reports say
1 report, newest first · the exact sentence from each-
NightEagle targets Russian companies“It incorporates components from several open-source projects, including the Neo-reGeorg tunnel, an exploit for the CVE-2020-0688 vulnerability, and the GhostWebShell class from the ysoserial utility.”
Indicators reported together
named in the same reports- hxxps://github[.]com/mirror-js/mirror-js/refs/heads/main/js/js-webpack.zipin 1 report
- hxxps://github[.]com/mirror-js/mirror-js/refs/heads/main/js/jsonp-pack.zipin 1 report
- hxxps://github[.]com/browserthemes/resourcepack/releases/download/main/resource-pack.zipin 1 report
- devtunnels[.]msin 1 report
- 1dcafb7f8448683281106b06dd22409ain 1 report
- 1f3034b706c78b35d8e34044e68c693ain 1 report
- 3ecd1cd627d0340c92901a478a7caad8in 1 report
- 631fb131a56caf4ca0f287ed73e876abin 1 report
- 4aa9fb1bf9223dfcdac920759bc7a3c7in 1 report
- hxxps://github[.]com/mirror-js/mirror-jsin 1 report
- hxxps://github[.]com/browserthemes/resourcepackin 1 report
Copy these 11 indicators · defanged
Also named with it: CVE-2019-0708
Thanks — we review every report.