CVE-2026-15459Active Exploitation

Named bug, not vibes. WPMU DEV Dashboard through 5.0.0 (CVE-2026-15459 / CVE-2026-16051): unauthenticated Hub actions, including installing a plugin. That's remote code execution. Patch is 5.0.1. If the site was already popped, the patch does not pull the injector out of the files or t

Cyber news updates: Chinese state-sponsored hackers have breached the U.S. Treasury Department, marking it as a 'Major Incident'. Full breakdown: http://cyberatlas.ai/bulletin A few other things worth watching this week: CISA adds three WordPress vulnerabilities (CVE-2026-15459, -28139, -66665) to KEV list Dell RecoverPoint zero-day (CVE-2026-22769) poses critical data privacy risks CERT Polska reports multi-stage cyberattack on Polish energy infrastructure Russian hackers release contact information of 186 US House Democrats AI-driven attacks breach Taiwanese government networks using Mirai-derived botnet #cybersecurity #news #hack

CVE-2026-15459: WPMU DEV Dashboard <=5.0.0 auth bypass leads to RCE. CVSS 8.1, actively exploited (3,419 attacks in 24h). Patch: 5.0.1. Update now. #infosec #WordPress #websecurity Security researcher Austin Ginder (founder of Anchor Hosting) reported a serious vulnerability in the WPMU DEV Dashboard plugin to the security firm Wordfence. The same day, the vendor WPMU DEV released a patch with version 5.0.1. On 6 August 2026 the vulnerability was officially registered as CVE-2026-15459 in the National Vulnerability Database (NVD) of the US-based NIST and rated with a CVSS score of 8.1 (High). This is a so-called authentication bypass vulnerability – meaning an attacker can completely circumvent the login check and perform actions that should really be reserved for a logged-in administrator. The most dangerous scenario: attackers can install and activate any plugin from a web address they control. Since such a "plugin" can contain arbitrary PHP code, this leads directly to Remote Code Execution (RCE) – the execution of external malicious code on your web server. What's particularly alarming: the flaw is already being actively exploited on a large scale. Within just 24 hours of disclosure, Wordfence blocked 3,419 attacks. The security provider Patchstack classified the vulnerability as "Known to be Exploited" (KEV) – that is, demonstrably already exploited. Details: https://shieldgaps.com/en/news/wpmu-dev-dashboard-500-auth-bypass-enables-rce-actively-exploited-217

CVE-2026-15459 Authentication Bypass and Remote Code Execution in WPMU DEV Dashboard Pl... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-15459 Vulnerability Notification: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=3