Daily · 2026-05-25
Copy Fail LPE CISA KEV, TrapDoor Cross-Ecosystem Supply Chain, Ghost CMS ClickFix, nginx-poolslip PoC, SonicWall Scanning Surge, Underminr CDN Abuse
Copy Fail Linux LPE added to CISA KEV with active exploitation confirmed; TrapDoor cross-ecosystem supply chain campaign hits npm, PyPI, Crates targeting crypto/AI devs; Ghost CMS SQL injection exploited in large-scale ClickFix campaign compromising 700+ domains; nginx-poolslip PoC demonstrates full remote ASLR bypass; SonicWall scanning surge signals imminent vulnerability disclosure; Underminr CDN abuse technique affects 88M+ domains.
The TrapDoor supply chain campaign is the day's defining story. Socket Security found 34 malicious packages across npm, PyPI, and Crates.io, each abusing its ecosystem's native execution model: npm postinstall hooks run a 1,149-line credential harvester, PyPI packages execute remote JavaScript on import, and Crates.io build scripts exfiltrate keystores during compilation. The campaign targets crypto, DeFi, and AI developers, poisoning AI coding assistant configuration files with hidden zero-width characters and opening malicious pull requests against langchain, langflow, llama_index, and OpenHands. TrapDoor supply chain campaign
The other headline is the Ghost CMS campaign. A pre-authentication SQL injection (CVE-2026-26980) let attackers steal admin API keys and inject a JavaScript loader into published articles, steering visitors through a fake Cloudflare prompt into a ClickFix payload. More than 700 domains are affected, including Harvard, Oxford, and DuckDuckGo; the flaw was patched in February but remains unpatched on thousands of sites.
Two items sharpen the patching picture. Researchers published a full exploit for nginx-poolslip (CVE-2026-9256), a heap overflow in the rewrite module with a complete remote ASLR bypass that reaches root, and archived ingress-nginx images are permanently vulnerable. GreyNoise logged a scanning surge against SonicWall management interfaces peaking at 597,000 sessions in one day, matching the actor signature seen ahead of the February disclosure, which points to an imminent new SonicOS flaw.
Watchlist: audit dependency trees, review AI assistant configuration files and pull requests from unknown accounts, replace unnamed PCRE captures in nginx rewrites, and restrict SonicWall management interfaces to trusted sources.