Product
Pac4j
- First Reported
- Apr 7, 2026
- Latest Reported
- Apr 7, 2026
Reported Context (1)
- saw rapid, machine-speed exploitation of public-facing services and AI infrastructure—critical flaws in Pac4j, IngressâNGINX, and Langflow enabled authentication bypasses and unauthenticated RCE that were Sysdig’s March 2026 Briefing Tracks Rapid Exploitation and TeamPCP Supply-Chain Attacks
CVE (5)
People (1)
Threat Actors (1)
MITRE ATT&CK (5)
Vendors (8)
Products (9)
Tools (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.