CyberSecBulletin

Grisuno vulnerabilities

We track 2 vulnerabilities in Grisuno products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 30, 2026.

2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score

Latest Grisuno vulnerabilities

  • 9.8 Critical severity

    LazyOwn: Use of Default Credentials

    CVE-2026-68503Grisuno

    LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations framework. Prior to 0.2.154, LazyOwn ships default C2 credentials LazyOwn and LazyOwn in payload.json and core/payload_schema.py and passes them unchanged to lazyc2.py HTTP Basic authent

  • 9.8 Critical severity

    LazyOwn: Missing Authentication for Critical Functionality

    CVE-2026-68502Grisuno

    LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations framework. Prior to 0.2.154, LazyOwn's lazyc2.py registers an unauthenticated Socket.IO input event handler that dispatches data.get('value') to LazyOwnShell.one_cmd, reaching LazyOwnShe