CVE-2026-8398 AVB Disc Soft DAEMON Tools Lite
A supply chain attack compromised the official installation packages of DAEMON Tools Lite (Windows versions 12.5.0.2421 through 12.5.0.2434), distributed from the legitimate website daemon-tools.cc between approximately April 8, 2026, and May 5, 2026.…
- CVSS
- 9.3 Critical
- EPSS
- 1.5%
- Percentile
- 74
- Published
- 2026-05-15
- Force
- 9 of 12
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
On CISA’s exploited list
Daemon Tools Lite Embedded Malicious Code Vulnerability
- Added
- 2026-05-27
- Federal patch deadline
- 2026-05-30
- Ransomware use
- not known