W3 Total Cache PHP injection via mfunc comment processor — weaponised by PCPJack worm
cve · CVE-2025-9501
Coverage timeline
1
first 2026-05-10 → last 2026-05-10
Briefs
1
1 distinct
Sources cited
9
5 hosts
Sections touched
0
—
Co-occurring entities
0
no co-occurrence
Story timeline
- 2026-05-10CTI Daily Brief — 2026-05-10
Source distribution
- nvd.nist.gov5 (56%)
- enisa.europa.eu1 (11%)
- securityweek.com1 (11%)
- sentinelone.com1 (11%)
- thehackernews.com1 (11%)
External references
All cited sources (9)
- sentinelone.comprimaryinlineSentinelLabs, 2026-05-07https://www.sentinelone.com/labs/cloud-worm-evicts-teampcp-and-steals-credentials-at-scale/
- enisa.europa.euinlineENISA press release, 2026-05-06https://www.enisa.europa.eu/news/new-cve-numbering-authorities-under-enisa-root
- nvd.nist.govinlineCVE-2025-9501https://nvd.nist.gov/vuln/detail/CVE-2025-9501
- nvd.nist.govinlineCVE-2025-29927https://nvd.nist.gov/vuln/detail/CVE-2025-29927
- nvd.nist.govinlineCVE-2025-48703https://nvd.nist.gov/vuln/detail/CVE-2025-48703
- nvd.nist.govinlineCVE-2025-55182https://nvd.nist.gov/vuln/detail/CVE-2025-55182
- nvd.nist.govinlineCVE-2026-1357https://nvd.nist.gov/vuln/detail/CVE-2026-1357
- securityweek.cominlineSecurityWeek, 2026-05-08https://www.securityweek.com/pcpjack-worm-removes-teampcp-infections-steals-credentials/
- thehackernews.cominlineThe Hacker News, 2026-05-07https://thehackernews.com/2026/05/pcpjack-credential-stealer-exploits-5.html
Items in briefs about W3 Total Cache PHP injection via mfunc comment processor — weaponised by PCPJack worm
No parsed item heading or body matches this entity yet. Items match by exact CVE id (for CVE entities), by lead-segment substring of the title in the item heading or body, or by a distinctive anchor token from the title appearing in the item heading. Coverage that lives inside a broader section (no per-item heading) is captured by the Story timeline above.