Exploited vulnerability
CVE-2026-8398
TLP:CLEAR
Daemon Tools Lite Embedded Malicious Code Vulnerability
Daemon Tools contains an unspecified vulnerability that has a high impact on confidentiality, integrity, and availability.
Facts
- Vendor: Daemon
- Product: Daemon Tools Lite
- CVSS: 9.8
- EPSS (probability of exploitation within 30 days): 1.5 %
- On CISA's Known Exploited Vulnerabilities list since: 27 May 2026
- First known exploitation: 27 May 2026
- CISA's deadline for US federal agencies: 30 May 2026
- Weakness: CWE-506
- First seen by Risk Letters: 15 May 2026
Members see which Nordic sectors the flaw hits, and what to do about it.
Get the full brief
Data: NVD (public domain), CISA KEV, FIRST EPSS, MITRE ATT&CK, AlienVault OTX. NVD