KnowledgeDeliver LMS zero-day exploited for Godzilla and
May 26, 2026
1 min read
8 views
cybersecurity
threats
news
A critical zero-day vulnerability (CVE-2026-5426) in Digital Knowledge's KnowledgeDeliver LMS was exploited to deploy the Godzilla web shell and Cobalt Strike. The flaw stems from hard-coded ASP.NET machine keys.
Was this article helpful?
0 found this helpful