CVE-2026-41264Vulnerability
Reported by 1 independent source · first reported by Sekoia.io · last reported
Last reported 10 days ago
What the reports say
1 report, newest first · the exact sentence from each-
Sekoia Honeypot Captures an Attack on GenAI Infrastructure“…es, including the CustomMCP remote code execution vulnerability (CVE-2025-59528), the CSV Agent remote code execution vulnerability (CVE-2026-41264), and authentication bypass and credential disclosure flaws similar to CVE-2024-31621.”
Indicators reported together
named in the same reports- hxxp://154.217.251[.]226:19999/flowise-hbin 1 report
- 154.217.251[.]226in 1 report
- 98br[.]orgin 1 report
- 98br[.]gamein 1 report
- gr99[.]topin 1 report
- 11kk[.]coin 1 report
Copy these 6 indicators · defanged
Also named with it: CVE-2025-59528, CVE-2024-31621, CVE-2022-24934
Thanks — we review every report.