Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-8398

Quick assessment

Affected
AVB Disc Soft DAEMON Tools Lite
Exploitation
Confirmed exploitation in the wild; remediate immediately
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Disc Soft DAEMON Tools Lite是Disc Soft公司的一款支持光盘镜像挂载、虚拟光驱创建与镜像文件管理的软件。 Disc Soft DAEMON Tools Lite 12.5.0.2421版本至12.5.0.2434版本存在安全漏洞，该漏洞源于供应链攻击，攻击者未经授权访问供应商构建或分发基础设施，将三个二进制文件植入木马，这些文件使用合法代码签名证书签名，使恶意安装程序看似可信并绕过基于签名的检测。

CVSS 9.8 · Critical KEV EPSS 0.96% · P60

Affected Version Matrix 1

VendorProduct Version RangeStatus
AVB Disc Soft DAEMON Tools Lite 12.5.0.2421< 2.6.0.* affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-8398

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A supply chain attack compromised the official installation packages of DAEMON Tools Lite (Windows versions 12.5.0.2421 through 12.5.0.2434), distributed from the legitimate website daemon-tools.cc between approximately April 8, 2026, and May 5, 2026. Attackers gained unauthorized access to the vendor's (AVB Disc Soft) build or distribution infrastructure and trojanized three binaries: DTHelper.exe, DiscSoftBusServiceLite.exe, and DTShellHlp.exe. These files were digitally signed with the legitimate AVB Disc Soft code-signing certificate, allowing the malicious installers to appear trustworthy and bypass signature-based detection.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
内嵌的恶意代码
Source: CVE Program / CVE List V5
Vulnerability Title
Disc Soft DAEMON Tools Lite 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Disc Soft DAEMON Tools Lite是Disc Soft公司的一款支持光盘镜像挂载、虚拟光驱创建与镜像文件管理的软件。 Disc Soft DAEMON Tools Lite 12.5.0.2421版本至12.5.0.2434版本存在安全漏洞，该漏洞源于供应链攻击，攻击者未经授权访问供应商构建或分发基础设施，将三个二进制文件植入木马，这些文件使用合法代码签名证书签名，使恶意安装程序看似可信并绕过基于签名的检测。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
AVB Disc Soft DAEMON Tools Lite 12.5.0.2421 ~ 2.6.0.* -

II. Public POCs for CVE-2026-8398

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-8398

请登录查看更多情报信息。

Security Blog Posts for CVE-2026-8398 (2)

IV. Related Vulnerabilities

Same weakness: CWE-506

V. Comments for CVE-2026-8398

No comments yet

Leave a comment