‘Underminr’ Vulnerability Lets Attackers Hide Malicious Connections Behind Trusted Domains
2026-05-23T13:24:06Z•526342503b3c3adf0fad08c3f6981d510a78516335c4110abaddc27c9cd9af70
CVE-2026-34926CVE-2026-9082apex-oneapple-app-store-fraud-preventioncisa-kevcisco-secure-workloadcommand-and-controldns-filtering-bypassdrupalemail-securityfirst-vpngas-station-hackinggrafanaindustrial-router-exploitationkimwolf-botnetlaw-enforcementsite-admin-privilegesupply-chain-attacktanstackunderminrzero-day
What happened
Multiple high-impact security developments: an ‘Underminr’ DNS vulnerability affecting roughly 88 million domains can bypass DNS filtering to hide C2 traffic; Drupal sites are seeing active attempts to exploit CVE-2026-9082; TrendAI patched an on‑prem Apex One zero‑day (CVE-2026-34926) that was exploited in the wild. Separately, Grafana disclosed data/code theft tied to the TanStack supply‑chain compromise, Cisco patched a critical Secure Workload REST API flaw that could grant remote Site Admin privileges, and law enforcement disrupted cybercrime infrastructure (First VPN) and arrested the 23
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityweek
- Record identifier
- 526342503b3c3adf0fad08c3f6981d510a78516335c4110abaddc27c9cd9af70
- Enrichment time
- 2026-05-23T13:24:06Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.