Approved changes feed: RSS · Atom

cpe:2.3:a:avb_disc_soft:daemon_tools_lite:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAvb Disc Soft (fb0532db-a330-5058-b8af-96494c523eb7)
ProductDaemon Tools Lite (77e243ae-badd-5408-ac55-4a341c583887)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-8398 vulnerable 2026-06-08 08:08:58.346572 Details available
CRITICAL (9.8)
A supply chain attack compromised the official installation packages of DAEMON Tools Lite (Windows versions 12.5.0.2421 through 12.5.0.2434), distributed from the legitimate website daemon-tools.cc between approximately April 8, 2026, and May 5, 2026. Attackers gained unauthorized access to the vendor's (AVB Disc Soft) build or distribution infrastructure and trojanized three binaries: DTHelper.exe, DiscSoftBusServiceLite.exe, and DTShellHlp.exe. These files were digitally signed with the legitimate AVB Disc Soft code-signing certificate, allowing the malicious installers to appear trustworthy and bypass signature-based detection.
Published: 2026-05-15T07:30:29.287Z
Updated: 2026-05-28T03:55:20.809Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.