CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Nx Console VS Code Extension Supply Chain Compromise and Malicious Code Injection (CVE-2026-48027)
[Affected Scope] Nx Console extension version 18.95.0 distributed via VS Code Marketplace and OpenVSX
[Impact] Execution of arbitrary malicious code within the developer's local environment, potentially leading to credential theft and full system compromise
[Mitigation] Immediately uninstall the compromised version 18.95.0 and upgrade to the clean version 18.100.0 or higher
DAEMON Tools Lite Official Installer Supply Chain Attack and Trojanized Binaries (CVE-2026-8398)
[Affected Scope] DAEMON Tools Lite Windows versions 12.5.0.2421 through 12.5.0.2434 distributed between April 8, 2026, and May 5, 2026
[Impact] Attackers compromised the vendor's infrastructure to distribute trojanized binaries signed with a legitimate certificate, bypassing security controls to establish backdoor access
[Mitigation] Immediately uninstall the compromised versions, perform a full system malware scan, and reinstall the clean, patched version from the official vendor