sign in--:--:--UTC

CVE-2026-39987

exploited in the wild

CVSS

9.3

Reports

4

First seen

Apr 13

Last seen

Jun 9

Affected product

Marimo Python notebook

Associated actors

Storm-1175 ×2 Akira ×1 BITTER APT ×1 DragonForce ×1 Qilin ×1

Recent reports

Researchers Build Self-Replicating AI Worm That Operates Entirely on Local, Open-Weight Models

The Hacker NewsJun 9 Critical

Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit

The Hacker NewsMay 29 Critical

April 2026 CVE Landscape: 37 High-Impact Vulnerabilities, 31 Actively Exploited

Recorded Future InsiktMay 15 High

Threat Intelligence Report – 13 April: LAPD Breach, ChipSoft Ransomware, Qilin Campaign, Ivanti Exploitation

Check Point ResearchApr 13

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans