{"id":257765,"date":"2026-05-28T09:20:00","date_gmt":"2026-05-28T13:20:00","guid":{"rendered":"https:\/\/news-you-need.com\/index.php\/2026\/05\/28\/u-s-cisa-adds-daemon-tools-tanstack-and-nx-console-flaws-to-its-known-exploited-vulnerabilities-catalog\/"},"modified":"2026-05-28T09:45:27","modified_gmt":"2026-05-28T13:45:27","slug":"u-s-cisa-adds-daemon-tools-tanstack-and-nx-console-flaws-to-its-known-exploited-vulnerabilities-catalog","status":"publish","type":"post","link":"https:\/\/news-you-need.com\/index.php\/2026\/05\/28\/u-s-cisa-adds-daemon-tools-tanstack-and-nx-console-flaws-to-its-known-exploited-vulnerabilities-catalog\/","title":{"rendered":"U.S. CISA adds Daemon Tools, TanStack,\u00a0and Nx Console flaws to its Known Exploited Vulnerabilities catalog"},"content":{"rendered":"<p><a href=\"https:\/\/securityaffairs.com\/192776\/security\/u-s-cisa-adds-daemon-tools-tanstack-and-nx-console-flaws-to-its-known-exploited-vulnerabilities-catalog.html\">U.S. CISA adds Daemon Tools, TanStack,\u00a0and Nx Console flaws to its Known Exploited Vulnerabilities catalog<\/a><\/p>\n<p><a href=\"https:\/\/securityaffairs.com\/192776\/security\/u-s-cisa-adds-daemon-tools-tanstack-and-nx-console-flaws-to-its-known-exploited-vulnerabilities-catalog.html\">https:\/\/securityaffairs.com\/192776\/security\/u-s-cisa-adds-daemon-tools-tanstack-and-nx-console-flaws-to-its-known-exploited-vulnerabilities-catalog.html<\/a><\/p>\n<p>Publish Date: <a href=\"publish_date]\">2026-05-28 09:20:00<\/a><\/p>\n<p>Source Domain: <a href=\"securityaffairs.com\">securityaffairs.com<\/a><\/p>\n<p><h2>U.S. CISA adds Daemon Tools, TanStack,\u00a0and Nx Console flaws to its Known Exploited Vulnerabilities catalog<\/h2>\n<\/p>\n<p>\t\t\t\t\t\t\t<span> Pierluigi Paganini<\/span><br \/>\n\t\t\t\t\t\t\t<span><img decoding=\"async\" src=\"https:\/\/securityaffairs.com\/wp-content\/themes\/security_affairs\/images\/clock-icon.svg\" alt=\"\"\/> May 28, 2026<\/span><\/p>\n<p>\t\t\t\t\t\t<img decoding=\"async\" class=\"img-fluid mb-4\" src=\"https:\/\/i0.wp.com\/securityaffairs.com\/wp-content\/uploads\/2020\/07\/CISA.jpeg?fit=700%2C368&#038;ssl=1\" alt=\"\"\/><\/p>\n<h2 class=\"wp-block-heading\">U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Daemon Tools, TanStack,\u00a0and Nx Console flaws to its Known Exploited Vulnerabilities catalog.<\/h2>\n<p class=\"wp-block-paragraph\">The U.S. Cybersecurity and Infrastructure Security Agency (CISA)\u00a0added Windows Shell and ConnectWise ScreenConnect flaws to its Known Exploited Vulnerabilities (KEV) catalog.<\/p>\n<p class=\"wp-block-paragraph\">Below are the flaws added to the catalog:<\/p>\n<ul class=\"wp-block-list\">\n<li>CVE-2026-8398\u00a0(CVSS score of ver. 4.0 of 9.3) Daemon Tools Lite Embedded Malicious Code Vulnerability<\/li>\n<li>CVE-2026-45321\u00a0(CVSS score of ver. 3.1 of 9.5) TanStack\u00a0Unspecified Vulnerability<\/li>\n<li>CVE-2026-48027\u00a0(CVSS score of ver. 4.0 of 9.3) Nx Console Embedded Malicious Code Vulnerability<\/li>\n<\/ul>\n<p class=\"wp-block-paragraph\">The first flaw, tracked as CVE-2026-8398, is a supply chain attack that compromised official DAEMON Tools Lite installers distributed from the vendor\u2019s website between April and May 2026. Attackers trojanized three signed binaries after breaching AVB Disc Soft\u2019s build or distribution systems. Because the malicious files carried legitimate code-signing certificates, the installers appeared trustworthy and could evade many security checks.<\/p>\n<p class=\"wp-block-paragraph\">The second flaw, tracked as CVE-2026-45321, is a supply chain attack that hit 42 @tanstack npm packages after attackers abused GitHub Actions and the trusted-publisher workflow. Using cache poisoning, a pull_request_target misconfiguration, and OIDC token theft from the runner\u2019s memory, they published 84 malicious package versions containing credential-stealing malware under TanStack\u2019s legitimate identity.<\/p>\n<p class=\"wp-block-paragraph\">The third issue, tracked as CVE-2026-48027, involves a malicious version of the Nx Console extension, version 18.95.0, briefly published to Visual Studio Marketplace and OpenVSX on May 19, 2026. The compromised release remained available for&#8230;<\/p>\n<p><a href=\"https:\/\/securityaffairs.com\/192776\/security\/u-s-cisa-adds-daemon-tools-tanstack-and-nx-console-flaws-to-its-known-exploited-vulnerabilities-catalog.html\">Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>U.S. CISA adds Daemon Tools, TanStack,\u00a0and Nx Console flaws to its Known Exploited Vulnerabilities catalog&#8230;<\/p>\n","protected":false},"author":1,"featured_media":257766,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/securityaffairs.com\/wp-content\/uploads\/2020\/07\/CISA.jpeg","fifu_image_alt":"","footnotes":""},"categories":[15],"tags":[24,32,27],"class_list":["post-257765","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-cybersecurity","tag-malware","tag-vulnerability"],"_links":{"self":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/257765"}],"collection":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=257765"}],"version-history":[{"count":1,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/257765\/revisions"}],"predecessor-version":[{"id":257767,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/257765\/revisions\/257767"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/257766"}],"wp:attachment":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=257765"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=257765"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=257765"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}