AI Summary

Hackers used a critical zero‑day vulnerability in the KnowledgeDeliver learning management system to install the Godzilla web shell on a server. The flaw, a deserialization issue identified as CVE‑2026‑5426, can be exploited without authentication. It originates from the use of a shared hardcoded machine key in the web portal configuration that is common to all KnowledgeDeliver customer deployments. The attack allows remote code execution and persistence on the affected server.

AI summaries can be wrong sometimes—always verify important details using the source article.