Threat actor
DEV-0950
Tracked by CyberSIXT since 21 Apr · last activity 21 Apr
Also Lace TempestMalpedia
- CVEs linked · all time
- 6
- in CISA KEV · all time
- 6
- article · all time
- 1
One article so farA coverage timeline appears once a second report names DEV-0950. Until then: The Hacker News, Tue 21 Apr, 07:32 UTC.
CVEs
6 CVEsCVE-2025-32975Quest KACE Systems Management Appliance (SMA) Improper Authentication VulnerabilityCVSS10.0CriticalExploited2.5%EPSS9articles
CVE-2023-27351PaperCut NG/MF Improper Authentication VulnerabilityCVSS8.2HighExploited78%EPSS6articles
CVE-2024-27199JetBrains TeamCity Relative Path Traversal VulnerabilityCVSS7.3HighExploited99.9%EPSS5articles
CVE-2025-48700Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting VulnerabilityCVSS6.1MediumExploited1.7%EPSS5articles
CVE-2026-20122Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs VulnerabilityCVSS5.4MediumExploited26%EPSS8articles
- CISA adds eight KEV flaws, Cisco SDWAN bugs actively exploitedThe Hacker News · first in our coverage