CVE-2026-32115Active Exploitation

MEDIUM

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

Patch affected systems immediately
Assume compromise if assets are exposed

Recommended action window: Immediate (within 24h)

Back to dashboard

4.0/ 10 priority

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

Active exploitation appears in 1 classified signals
Patch or workaround signal is available
1 mentions across 1 observed day

What's happening

Active exploitation reported across 1 signal
Patch or workaround mentioned in 1 signal
Technical details provided in 1 signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Active Exploitation

1100.0%

Referenced assets1 URL

By indicator

http://solomonneas.dev/intel

Full discourse1 post

Solomon Neas@solomonneas176d
Active Exploitation
🔴 SharePoint CVE-2026-32115 is under active exploitation. Patch now. 🔴 Marimo CVE-2026-29104 targets exposed notebooks for cloud credential theft. 🟡 108 malicious Chrome extensions stole Google and Telegram data. http://solomonneas.dev/intel
Post summary
The text reports that SharePoint CVE-2026-32115 is actively exploited in the wild, with a patch available, while CVE-2026-29104 involves credential theft from exposed notebooks.
00000234
32 followersView on X

Explore more

Back to dashboard