Huntback (decoy and honeypot telemetry)
huntback · B · candidate
First-hand telemetry on exploitation of N-central 4EverAble2Shell (21 production servers incl. Hotfix 2 builds), cited for an exploitation-status change; articles read cleanly with extract. | Fetch: `extract <URL>` for listing and posts. | Added 2026-11-13 as a candidate (promote to active after 3 contributing runs).
Cited in 2 entries
Citation cadence
Citation days per ISO week (1 weeks of coverage span, total 2).
- CVE-2026-90436, Atlassian Confluence Data Center 1.x to 9.x: remote code execution through the bundled Apache Axis behind the Remote API (XML-RPC and SOAP) when that API is enabled; fixed in 9.2.28, Confluence 10 not affected (CVSS 4.0 9.3)2026-11-11
- N-able N-central: a researcher published exploits for 33 alleged flaws and N-able shipped 2026.4 Hotfix 2 (build 2026.4.1.26) with seven CVE ids, but a second disclosure adds 4EverAble2Shell, a chain through Apache Axis (CVE-2026-90436) and a root escalation that works against Hotfix 2 when the Legacy API is on and is exploited on at least 21 production servers, and Agent2Shell, SYSTEM commands on managed Windows agents, with no fix yet for either2026-11-10