KnowledgeDeliver CVE-2026-5426: Zero-Day RCE via Shared ASP.NET Machine Key
No Comments on KnowledgeDeliver CVE-2026-5426: Zero-Day RCE via Shared ASP.NET Machine Key
May 27, 2026
May 26, 2026 Threat actors exploited a critical zero-day vulnerability in KnowledgeDeliver, a Japanese learning management system (LMS), to deploy the Godzilla web shell and infect targeted users with Cobalt Strike. The flaw, now tracked as…