THREATOPS

THREAT OPS › Threat News › [CISA KEV] CVE-2026-8398 — Daemon Daemon Tools Lite: Daemon Tools Lite Embedded Malicious Code Vulnerability

[CISA KEV] CVE-2026-8398 — Daemon Daemon Tools Lite: Daemon Tools Lite Embedded Malicious Code Vulnerability

lowcisa_kevPublished 2026-05-27

CVE: CVE-2026-8398 Vendor: Daemon Product: Daemon Tools Lite Vulnerability: Daemon Tools Lite Embedded Malicious Code Vulnerability Date Added: 2026-05-27 Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. Due Date: 2026-05-30 Known Ransomware Use: Unknown Notes: http

MITRE ATT&CK techniques

Cloud ServicesT1021.007

Indicators of compromise

CVE-2026-8398cve
https://blog.daemon-tools.cc/post/security-incidenturl

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-8398