Oct 19, 2026 · 16:51 UTC SEARCH
UNRATED KNOWN EXPLOITED
Vulnerability intelligence

CVE-2026-8398

VendorDaemon
ProductDaemon Tools Lite
Known exploitedYes
Added to CISA KEVMay 27, 2026
KEV due dateMay 30, 2026
Known ransomware useNot identified by CISA

Daemon Tools contains an unspecified vulnerability that has a high impact on confidentiality, integrity, and availability.

Required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CISA KEV status

This vulnerability is listed in CISA’s Known Exploited Vulnerabilities Catalog. Known ransomware campaign use: Unknown.

Stay Ahead of the Threat Landscape

Breach intelligence, vulnerability alerts, and original analysis — delivered as it happens.