VulnSocial

CVE-2026-8354Active Exploitation

MEDIUM

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Patch affected systems immediately
  • Assume compromise if assets are exposed

Recommended action window: Immediate (within 24h)

Back to dashboard
4.0/ 10 priority

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Active exploitation appears in 1 classified signals
  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Active exploitation reported across 1 signal
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-09-11); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-09-11: 1Mentions · 2026-09-19: 1Active Exploitation · 2026-09-11: 1Patch / Workaround · 2026-09-11: 1Technical Details · 2026-09-19: 109-1109-19
Signal classification2 categories
Active Exploitation
150.0%
Disclosure
150.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-09-111
Active Exploitation1
2026-09-191
Disclosure1
Full discourse2 posts
  • KMO.partners@Kmo_Partners
    Active Exploitation

    SonicWall SMA1000 actief misbruikt: hotfix 12.4.3-03526 of 12.5.0-02952 nu https://www.kmo.partners/2026/09/11/sonicwall-sma1000-hotfix-cve-2026-83548/ https://www.kmo.partners/wp-content/uploads/2026/09/sonicwall-cover.jpg #cve-2026-83548 #cve-2026-8354 https://t.co/07vA33BHiG

    Post summary

    The post indicates that SonicWall SMA1000 devices are actively exploited via CVE-2026-83548 and that hotfixes 12.4.3-03526 and 12.5.0-02952 are now available.

    0001046
    9 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-8354 The Gum Addon for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pop_tag' parameter in all versions up to, and including, 1.3.15 d… https://www.cve.org/CVERecord?id=CVE-2026-8354

    Post summary

    The text announces CVE-2026-8354 in the Gum Addon for Elementor, detailing a Stored XSS vulnerability via the 'pop_tag' parameter in versions up to 1.3.15, with no mention of exploits, patches, or active use.

    000001.2K
    58.1K followersView on X

Explore more

Back to dashboard