CVE-2026-51990Not scored
No description published yet
Vendor not yet named
Not in CISA KEVExploitation attributed to UNC3569 (per Gen Threat Labs, SecurityWeek)
0.9%probability of exploitation in the next 30 days
60th percentile
050100
Higher than 60% of scored CVEs
Not scored yet. NVD has not published a CVSS score.
DescriptionNVD
An issue in Sogou Sogou Input Method < 16.3.0.3498 (fixed in 16.3.0.3498) allows a remote attacker to execute arbitrary code via the biz_helper.exe component
Coverage2 articles · 2 outlets
One row per outlet, in order of first report. First in our coverage: SecurityOnline, 14 Sep.
Quiet for 6 weekslast report 14 Sep2 articles2 outlets
- Mon 14 Sep, 00:58 UTC. SecurityOnline, first report. Sogou Input Method Flaw Exposed Windows Users to Espionage Attacks.
- Mon 14 Sep, 11:57 UTC. SecurityWeek, its first report on the story. China-linked hackers exploited Sogou flaw to deploy GrayRabbit backdoor.
- First report
- Article
- Running total
Show as tableHide table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| 14 Sep 00:58 | SecurityOnline | Sogou Input Method Flaw Exposed Windows Users to Espionage Attacks |
| 14 Sep 11:57 | SecurityWeek | China-linked hackers exploited Sogou flaw to deploy GrayRabbit backdoor |
- Sogou Input Method Flaw Exposed Windows Users to Espionage AttacksSecurityOnline · first in our coverage
New articles also arrive in the RSS feed.