CVE Tools
Track your stack

In Other News: Ransomware Developer Sentenced, Plugin4Shell AI Attack, Critical SAP Flaw

SecurityWeekBy SecurityWeek News

Reported exploitedSAPBlack Axenpm

Our summary

This week’s security developments include a nearly 13-year Swiss prison sentence for the developer linked to Lockergoga, MegaCortex, and Nefilim ransomware. Defiant reported active exploitation of a file-upload vulnerability in the WooCommerce Wholesale Lead Capture plugin, which can enable PHP webshell uploads; users should update to version 2.0.3.2. SAP customers should urgently patch CVE-2026-44756, an unauthenticated memory-corruption issue affecting Extended Passport processing in products including S/4HANA, NetWeaver, and Business Suite. TP-Link also fixed Tapo C200 flaws CVE-2026-15315 and CVE-2026-15316 in firmware V5_1.4.6, while Plugin4Shell exposed silent plugin takeover risks for AI coding agents.

Read at SecurityWeek

SecurityWeek publishes this story on its own site; we link to it rather than reprint it.

  1. The Hacker News⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, ClickFix Surge, and Browser HijacksCVE-2026-15315, CVE-2026-15316
  2. The Hacker News⚡ Weekly Recap: Rogue AI Agents, WeChat Worm, PaperCut Attacks, AI Espionage, and RootkitsCVE-2026-44756
  3. The Hacker NewsSAP Patches CVSS 10.0 Kernel Flaw Enabling Unauthenticated Remote Code ExecutionCVE-2026-44756
  4. BleepingComputerSAP warns of maximum severity 'OVERPASS' kernel vulnerabilityCVE-2026-44756
  5. SecurityWeekSAP Patches Critical Extended Passport Processing VulnerabilityCVE-2026-44756

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store