Cactus Ransomware Exploiting Qlik Servers Vulnerability

The Cactus ransomware gang has been exploiting vulnerable Qlik sense servers ever since November 2023 using multiple vulnerabilities such as CVE-2023-41266 (Path Traversal), CVE-2023-41265 (HTTP request Tunneling) and CVE-2023-48365 (Unauthenticated Remote Code Execution). Though Qlik has addressed these vulnerabilities with multiple security advisories, thousands of servers remain vulnerable to exploitation. QlikSense is a data visualization […]

The post Cactus Ransomware Exploiting Qlik Servers Vulnerability appeared first on Cyber Security News.

cactus cactus ransomware code code execution cve cyber security cybersecurity data exploitation exploiting gang http november november 2023 path path traversal qlik qlik sense ransomware ransomware gang remote code remote code execution request security security advisories servers tunneling unauthenticated vulnerabilities vulnerability vulnerable