CRITICALCVSS 9.8Vulnerability

CVE-2026-8398

Daemon Tools contains an unspecified vulnerability that has a high impact on confidentiality, integrity, and availability.

Properties

severity
CRITICAL
product
Daemon Tools Lite
vulnerabilityName
Daemon Tools Lite Embedded Malicious Code Vulnerability
cvss_score
9.8
epss_score
0.00963
dueDate
2026-05-30
retrieved_at
2026-10-10T06:26:17+00:00
requiredAction
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
dateAdded
2026-05-27
last_source
FIRST EPSS
cve_id
CVE-2026-8398
cvss_vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
signal_observed_at
2026-09-11T17:54:47+00:00
vendorProject
Daemon
epss_percentile
0.60511

Related Entities (4)

INVOLVES (1)

←[Signal]

ENRICHED_BY (1)

→[Source]FIRST EPSS

DESCRIBES (1)

←[KEVEntry]Daemon Tools Lite Embedded Malicious Code Vulnerability

KNOWN_EXPLOITED (1)

→[Source]CISA KEV

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-8398 (CVSS 9.8) — Ninja Signal Threat Intelligence | Ninja Signal