Loading vulnerability…
CVE-2026-77651 is a supply-chain compromise affecting version 0.3.10 of the Rust arrayref crate. The affected release includes a rogue dependency that executes during compilation of a project that resolves and builds the crate. The dependency registers with attacker-controlled command-and-control infrastructure and enables attacker-controlled arbitrary code execution in the build environment. The issue is categorized as CWE-506, Embedded Malicious Code.
Mallory correlates every CVE against your assets, your vendors, and active adversary campaigns. Know which vulnerabilities matter for you, not just which ones are loud.
What it means. What to do now. Patch path, mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
If you can’t patch tonight, do this now.
Patch, then assume compromise.
No public exploits tracked yet. Mallory keeps watching.
No public exploit code observed for this vulnerability.
9 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
A network-reachable, low-complexity vulnerability with no required privileges or user interaction, rated CVSS v3 9.8 (Critical), affecting Canonical Ubuntu Linux LTS releases 20.04, 22.04, 24.04, and 26.04. The stated CVSS vectors indicate potential high impact to confidentiality, integrity, and availability.
A supply-chain vulnerability in the Rust arrayref crate version 0.3.10 that can execute malicious code at build/compile time via a rogue dependency that contacts a command-and-control server and enables arbitrary code execution.
A supply-chain style vulnerability in the Rust arrayref crate 0.3.10 where a rogue dependency can execute malicious code during project compilation and communicate with a command-and-control server, enabling arbitrary code execution.
Query your assets running an affected version, and investigate the blast radius.
Every observed campaign linking this CVE to a named adversary.
Malware families riding this exploit, with evidence and IOCs.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Cross-references every affected SKU, including bundled OEM variants.
Community discussion across Reddit, Mastodon, and other social sources.