Attackers conducted widespread mass-scanning campaigns in August 2026 targeting exposed Vite development servers to steal cloud credentials and Azure tokens via CVE-2026-39364, a file-read bypass (CVSS 7.5) affecting Vite 7.1.0–7.3.2 and 8.0.5. Honeynet telemetry recorded 807 session-grouped attacks and approximately 32,000 raw events. Attackers employed extensive wordlists to extract .env files, AWS/Azure credentials, and infrastructure state data from common paths, enabling potential cloud account compromise.
// Get alerts for Microsoft Azure