Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keys
2026-06-20T13:24:16Z•38cee4b81f01728a011c5490779dcd97cfab1abc0a31fceb3af0e2f45a9d5f8d
CVE-2026-4020CVE-2026-42530CVE-2026-48907EDR-evasionJCERaaSai-agent-exploitapple-a12-a13autojackcisafortibleedfortigatefortinetgentlekillergravity-smtpinformation-disclosurejoomlanginxnginx-rceransomwareremote-code-executionsecureromunpatchable-vulnerabilityusbliter8wordpress
What happened
Multiple high-impact and actively exploited vulnerabilities and campaigns were reported: attackers are exploiting a patched Gravity SMTP WordPress flaw (CVE-2026-4020) to steal API keys; F5 patched critical NGINX RCE(s) including CVE-2026-42530; CISA warned of widespread FortiGate compromise (FortiBleed) affecting tens of thousands of devices; Joomla JCE RCE (CVE-2026-48907) was added to CISA's KEV catalog; Microsoft disclosed a Defender privilege-escalation zero-day (RoguePlanet, CVE-2026-50656); Apple fixed a high-severity Beats Studio Buds Bluetooth auth flaw (CVE-2025-20701); researchers公開
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 38cee4b81f01728a011c5490779dcd97cfab1abc0a31fceb3af0e2f45a9d5f8d
- Enrichment time
- 2026-06-20T13:24:16Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.