CVE-2026-118523: EventPrime < 4.3.6.1 - Unauthenticated Pending Post Disclosure
HoneyLabs honeypots recorded 17 probes matching CVE-2026-118523 from 4 distinct source IP addresses in the last 7 days, of which 5 on interactive sensors. Severity is rated medium.
4 sources probed for CVE-2026-118523 on the interactive sensors. None of them sent the exploit payload.
What the sensors show
Probes arrived on 3 of the 7 days in this window. The busiest day was 2026-11-10, with 11. One address, 172.236.28.161, sent 41% of them. Every probing client that negotiated TLS presented one JA4 fingerprint, t13i251000_b78ed14e2fd0_ab7e3b40a677.
Request paths that identify it
- /wp-json/wp/v2/statuses
Addresses probing it
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 172.236.28.161 | 7 | Akamai Connected Cloud | United Kingdom |
| 50.116.58.253 | 5 | Akamai Connected Cloud | United States |
| 97.107.138.210 | 3 | Akamai Connected Cloud | United States |
| 172.105.109.85 | 2 | Akamai Connected Cloud | Canada |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS63949 | Akamai Connected Cloud | 17 | 4 |
Where it comes from
| Country | Probes |
|---|---|
| United States | 8 |
| United Kingdom | 7 |
| Canada | 2 |
Captured requests
- /wp-json/wp/v2/statuses
Requests the interactive sensors answered
- GET /wp-json/wp/v2/statuses
HTTP client fingerprints
- b11cun030_00040012_13ee3d34
CVE report
Open a specific CVE from the CVE tracker.