Vite

A mass-scanning campaign in August exploited CVE-2026-39364 in exposed Vite development servers, using crafted query parameters to bypass server.fs.deny protections and extract sensitive files including .env, AWS credentials, Azure profiles, Terraform state, and database passwords.