Skip to content
Threat Feed

Vendor

Digital Knowledge

1 brief RSS
critical advisory

KnowledgeDeliver ViewState Deserialization Vulnerability Exploitation

An unauthenticated remote code execution vulnerability, CVE-2026-5426, in Digital Knowledge's KnowledgeDeliver LMS platform due to shared ASP.NET machine keys allows attackers to inject malicious code, ultimately leading to Cobalt Strike infection of user workstations.

KnowledgeDeliver viewstate-deserialization rce web-shell cobalt-strike cve-2026-5426
2r 4t 1c