CVE-2022-42948

CISA KEV
ACT NOW Priority: 0.00 BB Relevance: 1/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Fortra Cobalt Strike User Interface contains an unspecified vulnerability rooted in Java Swing that may allow remote code execution.

CISA Known Exploited Vulnerability

Vendor / Product Fortra — Cobalt Strike
Date Added 2023-03-30
Remediation Due 2023-04-20
https://www.cobaltstrike.com/blog/out-of-band-update-cobalt-strike-4-7-2/; https://nvd.nist.gov/vuln/detail/CVE-2022-42948

Bug Bounty Relevance

1 / 100
✓ Known exploited (KEV)

CVSS Score

Unscored

EPSS — Exploitation Probability

2.71%
Raw Score 0.027060
Percentile 85.9%
Date 2026-10-28

Intelligence Sources

kev ref →