VulnSocial

CVE-2026-40345General

LOW

Exploit discussion active in current signal (2 latest mentions)

Immediate actions

  • Prioritize remediation for affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

Back to dashboard
3.5/ 10 priority

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Threat summary

  • Public PoC and exploit tooling are both present
  • 4 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Exploit tool or code specified in 1 signal
  • PoC mentioned or linked in 1 signal
  • Technical details provided in 1 signal
  • General: 2 classified signals
  • Disclosure: 1 classified signal
  • Peaked at 2 mentions on most recent observed day (2026-08-20)
  • 4 total mentions across 3 days

Deep dive

Activity timeline4 mentions / 3d
01122Mentions · 2026-08-16: 1Mentions · 2026-08-17: 1Mentions · 2026-08-20: 2PoC Mentioned / Linked · 2026-08-17: 1Exploit Tool / Code · 2026-08-17: 1Technical Details · 2026-08-20: 108-1608-1708-20
Signal classification3 categories
General
250.0%
Exploit
125.0%
Disclosure
125.0%
Referenced assets5 URLs
Classification over time
DateTotalLabels
2026-08-161
General1
2026-08-171
Exploit1
2026-08-202
Disclosure1General1
Full discourse4 posts
  • Joshua van Rijswijk@joshuabuilds_
    Exploit

    Just released write-up + poc + exploit for CVE-2026-40345. It is a high severity vulnerability in deepmerge-ts with over 14m downloads weekly affected! It is in https://github.com/Jvr2022/CVE-2026-40345 make sure to drop a star! #cve #vulnerability #exploit #bugbounty https://t.co/2L1WTOVTGi

    Post summary

    The tweet announces a write‑up, PoC, and exploit for CVE‑2026‑40345, providing a GitHub link to the code.

    02033173.0K
    1.3K followersView on X
  • Joshua van Rijswijk@joshuabuilds_
    General

    Just got CVE-2026-40345 in `deepmerge-ts` It is a small vulnerability but cool to check out! https://github.com/RebeccaStevens/deepmerge-ts/security/advisories/GHSA-ggr8-5vv4-36mx I will be publishing a writeup soon on my github at https://github.com/jvr2022 (Don't forget to follow me :) #cve #0day #vulnerability #TS https://t.co/zr2sk3W3dD

    Post summary

    The user references a newly disclosed CVE with a link to a GitHub advisory and mentions an upcoming write‑up, but provides neither technical details nor exploit material.

    0101351.4K
    1.3K followersView on X
  • CVE@CVEnew
    General

    CVE-2026-40345 deepmerge-ts is a typescript library providing functionality to deep merging of javascript objects. Prior to 8.0.0, the deepmerge, deepmergeCustom, deepmergeInto, and… https://www.cve.org/CVERecord?id=CVE-2026-40345

    Post summary

    The statement references CVE-2026-40345 for deepmerge-ts but provides no additional details or actionable information.

    000011.1K
    58.0K followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-40345 deepmerge-ts is a typescript library providing functionality to deep merging of javascript objects. Prior to 8.0.0, the deepmerge, deepmergeCustom, deepmergeInto, and… https://www.cve.org/CVERecord?id=CVE-2026-40345 ----- Traducción: CVE-2026-40345 dee… https://infoflow.cloud`

    Post summary

    The post references CVE-2026-40345, indicating a vulnerability in the deepmerge-ts TypeScript library affecting functions prior to version 8.0.0, but it provides no PoC, exploit, active exploitation, patch, or false‑positive claim.

    0000023
    102 followersView on X

Explore more

Back to dashboard