CVE-2026-17032 — Supsystic Multiple Pro Plugins - Backdoor via Compromised Vendor Update Server
Multiple Supsystic Pro plugins were distributed with malicious code through the vendor's compromised update server, allowing unauthenticated attackers to deploy a second-stage p…
Published: 2026-08-06 · CVSS: 9.8 · CVSS 3.1
Multiple Supsystic Pro plugins were distributed with malicious code through the vendor's compromised update server, allowing unauthenticated attackers to deploy a second-stage payload that exfiltrates credentials and other sensitive data and grants full control of affected sites.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7