#progress

Analysis · May 20, 2026 · Colten Anderson

Five hours from public PoC to live exploitation on your monitoring server

CVE-2024-6670 is an unauthenticated SQL injection in WhatsUp Gold. The exploit went public at 5pm UTC; Trend Micro saw the first real attack by 10pm. The tool that watches your whole network became the way in.