CVE-2026-4815Vulnerability
Reported by 2 independent sources · first reported by SOCRadar · last reported
Last reported 12 days ago
What the reports say
2 reports, newest first · the exact sentence from each-
CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records“The global campaign specifically focuses on known security flaws like wp2shell (CVE-2026-63030 and CVE-2026-60137) and CVE-2026-4815, an SQL injection vulnerability impacting the Support Board WordPress plugin, to seize control of WordPress sites.”
-
CyberXero: An AI-Augmented Initial Access Broker Targeting Ukrainian Critical Infrastructure“Exploitation of Magento and other e-commerce platforms ran in parallel, including a time-based SQL injection against Support Board (CVE-2026-4815) weaponized within 30 days of disclosure.”
Indicators reported together
named in the same reports- 46.21.250[.]135in 2 reports
- exploit[.]inin 1 report
- r00t-shell[.]comin 1 report
- 45.88.106[.]2in 1 report
- 212.193.31[.]189in 1 report
- 91.208.184[.]148in 1 report
- 45.88.106[.]78in 1 report
- 49.234.12[.]182in 1 report
- 42.193.100[.]94in 1 report
- 92a789444708fa1c…5a18197d0090in 1 report
- a5ae0aab352871bc…592cd34eb86cin 1 report
- 71e21094c1ac1cf0…682681fc1192in 1 report
Copy these 12 indicators · defanged
Also named with it: CVE-2026-60137, CVE-2026-63030, CVE-2021-4034, CVE-2026-0257, CVE-2022-28368, CVE-2023-7028, CVE-2024-1086, CVE-2020-1938
Thanks — we review every report.