KEV Entry

CVE-2024-3721

Known Exploited Vulnerability Entry SiberKapan

Confirmed Exploited

Vulnerability ID

Status Updated At

2026-11-07 13:23 UTC

First Seen At

2026-08-09

Last Seen At

2026-11-07

Notes

Observed on SiberKapan honeypot and production web server sensors located in Turkey. Regions reflect sensor coverage, not global exclusivity.

{'id': 'CVE-2024-3721', 'url': 'https://nvd.nist.gov/vuln/detail/CVE-2024-3721'}
{'id': 'CVE-2024-3721', 'url': 'https://siberkapan.org/kev-catalog'}

Entry UUID

ccb78995-c8a6-4038-a929-28da5975ca16

Catalog

SiberKapan
fc16d4f5-594d-5807-9bf1-71af4407c589

Created

2026-11-07 18:25 UTC

Last Updated

2026-11-07 18:25 UTC

Type	Source	Signal	Confidence	Details	GCVE Metadata
honeypot	SiberKapan	in_the_wild_attempts	0.80	View details `{ "attempts_90d": 1349, "description": "TBK DVR command injection", "distinct_source_ips_90d": 22, "sensor_types": [ "nginx" ], "signature_strength": "strong", "successful_exploitation": false }`	-