CVE report
CVE-2026-44381medium
MISP < 2.5.37 - SQL Injection
Events 90d
50
Distinct IPs
26
Severity
medium
CISA KEV
Not listed
Detection signature
An event counts toward CVE-2026-44381 when its URL path contains any of these (case-insensitive). This is what our matching is based on.
- · /users/login
Pre-disclosure activity
all early actors →Analysing probe history around the publication date…
Recent probe volume (last 7 days)
peak: 10 events/dayeventsdistinct IPs
Downloads & integrations
Top sources probing for CVE-2026-44381
- 152.32.173.654 eventsHong Kong· UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
- 220.158.232.1543 eventsCambodia· ISPIXP IN CAMBODIA WITH THE BEST VERVICE IN THERE.
- 118.26.38.1972 eventsHong Kong· UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
- 101.36.124.1672 eventsHong Kong· UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
- 152.32.187.1232 eventsHong Kong· UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
- 152.32.131.102 eventsHong Kong· UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
- 103.210.21.882 eventsSingapore· UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
- 45.249.244.592 eventsHong Kong· UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
- 123.58.209.1332 eventsHong Kong· UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
- 128.1.132.1042 eventsHong Kong· UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
- 123.58.209.2242 eventsHong Kong· UCLOUD INFORMATION TECHNOLOGY HK LIMITED
- 123.58.215.1592 eventsHong Kong· UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
- 123.58.209.1582 eventsHong Kong· UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
- 152.32.216.82 eventsHong Kong· UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
- 101.36.106.752 eventsHong Kong· UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
- 123.58.213.2302 eventsHong Kong· UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
- 152.32.185.1682 eventsHong Kong· UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
- 152.32.239.852 eventsHong Kong· UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
- 152.32.191.1942 eventsHong Kong· UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
- 101.36.109.1102 eventsHong Kong· UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
- 101.36.122.752 eventsHong Kong· UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
- 165.154.2.1351 eventsHong Kong· UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
- 165.154.2.2251 eventsHong Kong· UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
- 147.139.178.2141 eventsIndonesia· Alibaba (US) Technology Co., Ltd.
- 165.154.1.1041 eventsHong Kong· UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
- 165.154.1.2361 eventsHong Kong· UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
Top networks the attempts come from
Fingerprints of the clients exploiting this
The HTTP (JA4H) and TLS (JA4) fingerprints seen on these attempts. Click one to see the whole population that carries it.
Sample request paths observed
- /v1/users/login
- /users/login
- /api/users/login