Marimo

Reported Context (9)

Marimo Recorded Future Reports 94 High-Impact Vulnerabilities in September 2026, Including 80 Actively Exploited
#Revolut September Security Briefing: Social Engineering, Rogue Agents and ShinyHunters
The attacker exploited CVE-2026-39987, a pre-authentication remote code execution (RCE) vulnerability in marimo. They ran a complete credential-pivot chain end to end: initial access through the unauthenticated Sysdig Traces Marimo RCE Attacker's Eight-Second AWS-to-SSH Pivot
Marimo Recorded Future Identifies 73 High-Impact Vulnerabilities in August, 70 Actively Exploited
Most AI tools ship unauthenticated (Marimo, Flowise, Langflow, Ollama, ChromaDB, Milvus, and others). Wiz Details 90 Days of Attacks on AI Infrastructure

CVE (218)

Malware (27)

People (3)

Threat Actors (26)

MITRE ATT&CK (36)

Vendors (55)

Products (176)

Tools (27)

Industries (11)

Countries (5)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.