Threat Intelligence Report

Exploitation of KnowledgeDeliver via ViewState Deserialization Vulnerability | Google Cloud Blog

📅 May 25, 2026 📰 cloud.google.com 🔍 1 CVE(s) referenced

A critical ViewState deserialization vulnerability in KnowledgeDeliver, caused by hardcoded and reused ASP.NET machine keys, enabled unauthenticated remote code execution and widespread compromise of customer environments, allowing attackers to deploy in-memory web shells, tamper with files, and deliver targeted malware to users.

vendor

CVE-2026-5426

🔐 Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

📊 Visual Mindmap

🎯 IOC Extraction

⚔️ MITRE ATT&CK TTPs

📦 STIX 2.1 Bundle