Exploitation ongoing with high activity in latest observed window (7 mentions)
Recommended action window: Immediate (within 24h)
NVD description
An OS command Injection issue exists in LogonTracer prior to v2.0.0. An arbitrary OS command may be executed by a logged-in user.
Priority
MEDIUM
Exploitation
ACTIVE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-27 | 3 | Disclosure2General1 |
| 2026-04-30 | 1 | Patch1 |
| 2026-05-23 | 7 | Active Exploitation3Disclosure4 |
33277, a — The Defender''s Weapon Becomes the Attack Surface: LogonTracer RCE (CVE-2026-33277) Puts Windows Incident Response at Risk. The Defender's Weapon Becomes the Attack Surface: LogonTracer RCE Now in the Wild
Post summary
CVE-2026-33277 is a remote code execution vulnerability in LogonTracer, reportedly being exploited in the wild and threatening Windows incident response.
On April 23, 2026, the Japan Computer Emergency Response Team Coordination Center (JPCERT/CC) disclosed CVE-2026-33277, an OS command injection vulnerability in LogonTracer versions prior to v2.0.0. LogonTracer is a freely available tool designed to help security teams…
Post summary
JPCERT/CC disclosed CVE‑2026‑33277, an OS command injection flaw affecting LogonTracer versions before 2.0.0.
Japan's CERT (JPCERT/CC) disclosed CVE-2026-33277, a critical OS command injection flaw in LogonTracer, the widely-used open-source tool for investigating malicious Windows logons. Authenticated users can execute arbitrary OS commands with full system privileges (CVSS…
Post summary
Japan's CERT discloses CVE-2026-33277, a critical OS command injection flaw in LogonTracer that allows authenticated users to run arbitrary commands with full system privileges.
What this means for your agents and systems: Japan's CERT (JPCERT/CC) disclosed CVE-2026-33277, a critical OS command injection flaw in LogonTracer, the widely-used open-source tool for investigating malicious Windows logons. Authenticated users can execute arbitrary OS…
Post summary
Japan's CERT disclosed CVE-2026-33277 as a critical OS command injection flaw in LogonTracer, allowing authenticated users to execute arbitrary OS commands.
Japan's CERT (JPCERT/CC) disclosed CVE-2026-33277, a critical OS command injection flaw in LogonTracer, the widely-used open-source tool for investigating malicious Windows logons. Authenticated users can execute arbitrary OS commands with full system privileges (CVSS…
Post summary
Japan's CERT announced CVE-2026-33277, a critical OS command injection vulnerability in LogonTracer that lets authenticated users execute arbitrary commands with full system privileges.
The Defender's Weapon Becomes the Attack Surface: LogonTracer RCE Now in the Wild Japan's CERT JPCERT/CC disclosed CVE-2026-33277, a critical OS command injection flaw in LogonTracer, the widely-used open-source tool for investigating malicious Windows logons.
Post summary
Japan's CERT JPCERT/CC reports a critical OS command injection flaw in LogonTracer, with the headline indicating the vulnerability is being actively exploited in the wild.
CVE-2026-33277 · 8.8 → v2.0.0 The Defender's Weapon Becomes the Attack Surface: LogonTracer RCE Now in the Wild
Post summary
CVE-2026-33277 is a LogonTracer RCE that is currently being exploited; the vulnerability is severe (CVSS 8.8) but no mitigations or PoC are provided.
🚨 HIGH SEVERITY: CVE-2026-33277 (CVSS 8.8) OS Command Injection in LogonTracer <v2[.]0[.]0 allows authenticated users to execute arbitrary commands. Upgrade to v2[.]0[.]0+ immediately. #CVE #Vulnerability #PatchNow https://t.co/6KlqsEXjPt
Post summary
The tweet alerts that CVE-2026-33277 is a high-severity OS command injection in LogonTracer, and it urges users to upgrade to version 2.0.0 or later for a patch.
CVE-2026-33277 An OS command Injection issue exists in LogonTracer prior to v2.0.0. An arbitrary OS command may be executed by a logged-in user. https://www.cve.org/CVERecord?id=CVE-2026-33277
Post summary
CVE‑2026‑33277 is an OS command injection flaw in LogonTracer that permits arbitrary command execution by a logged‑in user, with no proof‑of‑concept, exploit tool, active exploitation, or patch details provided.
⚡ New CVE Alert: CVE-2026-33277 📊 Severity: 8.8 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-33277 #CVE-2026-33277 #CVE #High #CyberSecurity #InfoSec https://t.co/qssP7BtRaF
Post summary
A new CVE (CVE-2026-33277) with severity 8.8 and high risk level is announced, impacting multiple unspecified products, but no technical details, exploit code, or mitigation information are provided.
CVE-2026-33277 OS Command Injection in LogonTracer Prior to Version 2.0.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-33277 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1
Post summary
The tweet announces CVE-2026-33277, an OS command injection vulnerability in LogonTracer versions prior to 2.0.0, with a link to the vulnerability details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | jpcert | logontracer | - | - | - |