Storm-1175 focuses gaze on vulnerable web-facing assets in high-tempo Medusa ransomware operations

🗓️ 06 Apr 2026 16:00:00Reported by Microsoft Threat IntelligenceType

Storm-1175 rapidly exploits disclosed and zero-day flaws to deploy Medusa ransomware on vulnerable web assets.

Reporter	Title	Published	Views	Family All 853
GithubExploit	Exploit for Improper Access Control in Papercut Papercut_Mf	21 Apr 202320:13	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity	1 Jul 202601:36	–	githubexploit
GithubExploit	Exploit for Path Traversal in Connectwise Screenconnect	24 Jul 202606:35	–	githubexploit
GithubExploit	Exploit for CVE-2026-1731	11 Feb 202609:18	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity	18 May 202612:49	–	githubexploit
GithubExploit	Exploit for Improper Access Control in Papercut Papercut_Mf	14 Apr 202502:33	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Beyondtrust Privileged_Remote_Access	20 Feb 202622:31	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Connectwise Screenconnect	22 Mar 202421:20	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Connectwise Screenconnect	16 Oct 202408:05	–	githubexploit
GithubExploit	Exploit for Improper Access Control in Papercut Papercut_Mf	25 Apr 202320:51	–	githubexploit

06 Apr 2026 16:00Current

7.4High risk

Vulners AI Score7.4

CVSS 3.110

CVSS 39.8

CVSS 49.9

EPSS0.99999

SSVC