OTX Threat: Gray Rabbits and the Tale of a One-Click Backdoor

Gen Threat Labs identified CVE-2026-51990, a critical remote code execution vulnerability in Sogou Input Method, a widely-used Chinese-language input editor with hundreds of millions of installations. The exploit chains three weaknesses: unvalidated command-line argument injection in the sgbiz: custom protocol handler, unrestricted URL navigation in a CEF-based webview, and a severely outdated uns CVEs: CVE-2021-38003, CVE-2026-51990 Sectors: Government, Education, Technology