CPU-Z and HWMonitor downloads tampered with by hackers in new supply chain style attack

Google News · Supply Chain cybersecurity · April 10, 2026 · Original source

Related Vulnerabilities

CVE-2026-40157: PraisonAI is a multi-agent teams system. Prior to 4.5.128, cmd_unpack in the recipe CLI extracts .pr CRITICAL
CVE-2026-35643: OpenClaw before 2026.3.22 contains an unvalidated WebView JavascriptInterface vulnerability allowing HIGH
CVE-2026-6005: A flaw has been found in code-projects Patient Record Management System 1.0. The affected element is MEDIUM
CVE-2026-40100: FastGPT is an AI Agent building platform. Prior to 4.14.10.3, the /api/core/app/mcpTools/runTool end MEDIUM
CVE-2026-5988: A vulnerability was detected in Tenda F451 1.0.0.7. This impacts the function formWrlsafeset of the HIGH