Campaign targets exposed Vite servers for cloud credentials
Image: Primary A mass-scanning campaign is targeting internet-exposed Vite development servers to retrieve AWS and Azure credentials and configuration files, BleepingComputer reported. The campaign exploits CVE-2026-39364, which the report says can bypass Vite file-read controls in specified 7.x and 8.x versions. F5 observed more than 800 attacks and about 32,000 raw events over a month. The report recommends updating Vite, restricting exposure, and rotating secrets reachable from publicly exposed unpatched servers.
Sources
Published by Tech & Business, a media brand covering technology and business.
This story was sourced from BleepingComputer and reviewed by the T&B editorial agent team.
Back to Newswire
