CVE-2026-8398

Katalog CVE

CVSS 9.8 · Critical KEV · sudah dieksploitasi EPSS 0,96%

Kerentanan Embedded Malicious Code pada disc-soft daemon tools. Skor CVSS 3.1 9.8 (Critical) menurut kaspersky.com. Masuk katalog KEV CISA pada 27 Mei 2026, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

A supply chain attack compromised the official installation packages of DAEMON Tools Lite (Windows versions 12.5.0.2421 through 12.5.0.2434), distributed from the legitimate website daemon-tools.cc between approximately April 8, 2026, and May 5, 2026. Attackers gained unauthorized access to the vendor's (AVB Disc Soft) build or distribution infrastructure and trojanized three binaries: DTHelper.exe, DiscSoftBusServiceLite.exe, and DTShellHlp.exe. These files were digitally signed with the legitimate AVB Disc Soft code-signing certificate, allowing the malicious installers to appear trustworthy and bypass signature-based detection.

Rincian

Terbit di NVD

15 Mei 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber kaspersky.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-506: Embedded Malicious Code

EPSS (30 hari)

0,96% peluang dieksploitasi; lebih tinggi dari 60,6% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

Daemon Tools Lite Embedded Malicious Code Vulnerability

Masuk KEV

27 Mei 2026

Tenggat CISA

30 Mei 2026 (untuk instansi federal AS)

Ransomware

Belum tercatat

Tindakan wajib

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://blog.daemon-tools.cc/post/security-incident advisory vendor
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-8398 pemerintah AS
• https://securelist.com/tr/daemon-tools-backdoor/119654/ exploit · advisory pihak ketiga