CVE-2026-8496Vulnerability
Reported by 1 independent source · first reported by The Hacker News · last reported
Last reported 4 days ago
What the reports say
1 report, newest first · the exact sentence from each-
Russian APT28 Breaches NATO Naval Shipbuilder in NATO Country, Deploys New Reflective Loader“…UA also said it observed APT28 exploiting vulnerabilities such as CVE-2026-21509, a security feature bypass in Microsoft Office, and CVE-2026-8496, a zero-click vulnerability in the SOGo webmail client, to deliver the COVENANT malware as well as siphon victims' mailbox credential…”
Indicators reported together
named in the same reports- 185.82.218[.]119in 1 report
- 91.149.221[.]118in 1 report
- 91.149.221[.]123in 1 report
- 166.88.239[.]54in 1 report
- 194.87.108[.]12in 1 report
- 194.87.108[.]217in 1 report
Copy these 6 indicators · defanged
Also named with it: CVE-2026-21509
Thanks — we review every report.