CVE-2026-17032

Name of the Vulnerable Software and Affected Versions Supsystic Pro plugins (affected versions not specified)

Description Malicious code was distributed through a compromised update server. This allows unauthenticated attackers to deploy a second-stage payload, which enables the exfiltration of credentials and other sensitive data, granting full control over the affected sites.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.