Phantom Framework

INC Ransomware Affiliates Expose Seven Servers Holding Phantom AI Framework and 46 Encryptors

INC Ransomware affiliates and INC Ransomware affiliates AI server infrastructure diagram

INC Ransomware Affiliates Expose Seven Servers Holding Phantom AI Framework and 46 Encryptors

Do Son October 23, 2026

SOCRadar reveals 7 servers run by INC Ransomware affiliates, exposing an INC Ransomware affiliates AI workbench, Phantom, and 46 encryptors.

CVE-2024-58406CVSS 8.7
Huatian Dynamic OA8000 collaborative office system contains an unauthenticated path traversal vulnerability in /OAapp/jsp/trace/ntkodownload.jsp, where the filename request...
Watchtower Verified📅 Updated: Nov 13, 2026
CVE-2026-114713CVSS 8.6
The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
CISA KEV📅 Added to KEV: Nov 13, 2026
CVE-2026-123039CVSS 7.8
The Gaia OS DynamicCLI daemon runs as root and listens on a world-writable local socket (/tmp/dynamic_socket) without authenticating...
CISA KEV📅 Added to KEV: Nov 13, 2026
CVE-2026-20320CVSS 7.5
A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote...
CISA KEV📅 Added to KEV: Nov 10, 2026
CVE-2026-111793CVSS 4.3
Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
CISA KEV📅 Added to KEV: Nov 10, 2026
CVE-2026-111560CVSS 8.6
Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda...
CISA KEV📅 Added to KEV: Nov 10, 2026
CVE-2026-116606CVSS 9.3
An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
CISA KEV📅 Added to KEV: Nov 10, 2026
CVE-2026-125350
Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
CISA KEV📅 Added to KEV: Nov 10, 2026

📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Pro from $7/mo

CVE-2026-125795CVSS 9.8
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Estatik Estatik...
📅 Updated: Nov 15, 2026
CVE-2026-125769CVSS 9.8
Incorrect Privilege Assignment vulnerability in Nasir Ahmed Advanced Form Integration advanced-form-integration allows Privilege Escalation.This issue affects Advanced Form...
📅 Updated: Nov 15, 2026
CVE-2026-122662CVSS 9.8
Deserialization of Untrusted Data vulnerability in Barn2 Plugins Document Library Pro document-library-pro allows Object Injection.This issue affects Document...
📅 Updated: Nov 15, 2026
CVE-2026-129483CVSS 9.3
Cyrus SASL through 2.1.28 contains an authentication bypass vulnerability in the SRP server mechanism because srp_server_mech_step2 does not...
📅 Updated: Nov 15, 2026
CVE-2026-129453CVSS 9.4
A vulnerability was found in DrayTek Vigor2960 1.5.1.6. This issue affects the function check_file_exist of the file /cgi-bin/mainfunction.cgi...
📅 Updated: Nov 15, 2026
CVE-2026-124560CVSS 9.3
A vulnerability was found in D-Link DIR-878 1.20B05. This affects the function GetCAPTCHAsetting of the file bin/prog.cgi of...
📅 Updated: Nov 15, 2026
CVE-2026-128138CVSS 9.8
NLTK 3.10.3 incomplete fix: additional JVM/JAR sandbox bypass through unvalidated launcher tokens in `java()` command arguments Summary NLTK...
📅 Updated: Nov 15, 2026
CVE-2026-129452CVSS 9.4
A vulnerability has been found in DrayTek Vigor2960 1.5.1.6. This vulnerability affects the function set_table of the file...
📅 Updated: Nov 15, 2026