Vulnerabilities

KnowledgeDeliver LMS Zero-Day Exploited to Deploy Godzilla

May 26, 2026 1 min read 9 views
cybersecurity malware news
Attackers exploited a critical deserialization zero-day (CVE-2026-5426) in KnowledgeDeliver LMS, caused by hardcoded machine keys, to achieve remote code execution and deploy the Godzilla web shell.

Was this article helpful?

0 found this helpful

Related Articles

Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability

1 min read

Cisco make-me-root email bug exploited as a 0-day by unknown crims

3 min read

Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles

1 min read

Ready to protect your organization?

Get started with Phishlens and run your first phishing simulation today.

Schedule a Demo