Search — “CVE-2026-75650”
1 story · 1 IoC
Stories
P1
Autonomous AI agents using open-source Cairn pentest tool breach 100+ company websites
A Chinese-speaking operator pointed autonomous AI agents running the open-source Cairn tool at over 1,200 e-commerce and company websites, reaching more than 100 companies, per Reuters and NorForge reporting. Agents aimed to run code on shops and plant web shell upload forms, with one documented chain via unauthorized memcached session store write access, unsafe PHP object deserialization, and old Zend Framework code. Hunters should look for exposed Cairn control panels (often port 8000 without login) and unexpected file-upload forms in hidden directories on web servers.
IoCs
| cve | CVE-2026-75650 | seen 1×, first 2026-10-21 13:04Z | StyleSmuggler critical Magento flaw; proof-of-concept found in attacker worker directory, no evidence it was used in these break-ins. · 2026-10-21 |