#Digital Knowledge

1 article

CVE-2026-5426: KnowledgeDeliver LMS Zero-Day Exploited for Godzilla Shell

Attackers exploited a zero-day in KnowledgeDeliver LMS (CVE-2026-5426) using hard-coded ASP.NET keys to deploy Godzilla web shells and Cobalt Strike Beacons.

Runtime Rebel Intel

4 min read·May 26, 2026