cve recordzero dayexploit reported

CVE-2026-1357

CVSS—

Severitynone

Weakness—

EPSS35.1%98.4th percentile

Exploited1 KEV source

patch window

Called exploited the same day it was disclosed.

Measured from the CVE publication date to the earliest of 1 KEV catalogue that list it.

The life of this vulnerability

CVE publishedFeb 11, 2026
First KEV listingFeb 11, 2026same day
Last sightingAug 7, 20266mo

Gaps are compressed to equal steps. The elapsed time is printed under each.

Which catalogues call it exploited

CISA KEVUS federaldoes not list it
EUVDENISA, European Uniondoes not list it
VulnCheck KEVcommercial researchlisted Feb 11, 2026
CIRCLaggregator, mirrors the abovedoes not list it

Sources1 of 3

Listings differ by—

This rests on a single catalogue. No second catalogue corroborates the claim that it is being exploited. CIRCL is an aggregator and is not counted.

Public exploitation evidence

reported exploitationAug 7, 2026www.recordedfuture.com/blog/july-2026-cve-landscape
reported exploitationJul 9, 2026www.cyber.gov.au/about-us/view-all-content/alerts-and-adviso
reported exploitationJun 23, 2026ctrlaltintel.com/research/Wordpress/
reported exploitationMay 7, 2026www.sentinelone.com/labs/cloud-worm-evicts-teampcp-and-steal
reported exploitationFeb 11, 2026patchstack.com/database/wordpress/plugin/wpvivid-backupresto

5 public reports collected from VulnCheck and CIRCL, first on Feb 11, 2026. Each links to its original source. We have not verified them.

Description

References

← Back to the CVE Tracker

Our coverage of CVE-2026-1357

CVE-2008-4128Aug 7, 2026high

July 2026 CVE Landscape

Cybersecurity researchers identified 85 high-impact vulnerabilities in July 2026 that require urgent remediation, marking a 44% increase from the previous month. Of these, 36 were assigned a "Very Critical" risk score by Insikt Group. The vulnerabilities affected products from 61 vendors, with Microsoft accounting for approximately 12% of the total.

CVE-2025-29927May 7, 2026high

Cloud Worm PCPJack Steals Credentials and Evicts TeamPCP Artifacts

A newly identified cloud worm, dubbed PCPJack, is actively targeting exposed cloud infrastructure to steal credentials and remove any artifacts associated with the threat actor group TeamPCP. SentinelLabs researchers discovered the framework, which operates as a credential theft toolset that propagates across cloud environments.