{"vulnerability": "cve-2026-5442", "sightings": [{"uuid": "e9b70804-e434-463e-8013-08e34590f7cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5442", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mj3a5t24yy2j", "content": "", "creation_timestamp": "2026-04-09T16:30:08.763725Z"}, {"uuid": "1264c025-09d3-4207-8130-7e8e56561ce0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5442", "type": "seen", "source": "Telegram/BoOqWaO3KXS_kNoeZKG9-5DucbPr6wdRjfTcRW39IR2MuNQ", "content": "", "creation_timestamp": "2026-04-14T20:03:31.000000Z"}, {"uuid": "2518aadc-ed57-4516-906a-b04e29d0441d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54428", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ms2mmfu6s22o", "content": "HTTP\u901a\u4fe1\u30e9\u30a4\u30d6\u30e9\u30ea\u300cApache HttpComponents\u300d\u306b\u8907\u6570\u306eDoS\u8106\u5f31\u6027\n\nJava\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306b\u7d44\u307f\u8fbc\u3093\u3067\u4f7f\u3046HTTP\u901a\u4fe1\u30e9\u30a4\u30d6\u30e9\u30ea\u300cApache HttpComponents\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\n\nHTTP\u30d8\u30c3\u30c0\u51e6\u7406\u306b\u95a2\u9023\u3057\u3001\u30b5\u30fc\u30d3\u30b9\u62d2\u5426\u304c\u751f\u3058\u308b\u8106\u5f31\u6027\u300cCVE-2026-54428\u300d\u300cCVE-2026-54399\u300d\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3082\u306e\u3002\n\n\u300cCVE-2026-54428\u300d\u306f\u3001HTTP/2\u306e\u300cHPACK\u300d\u30c7\u30b3\u30fc\u30c0\u306b\u304a\u3051\u308b\u30ea\u30bd\u30fc\u30b9\u5272\u308a\u5f53\u3066\u306e\u8106\u5f31\u6027\u3002\u904e\u5927\u306a\u5727\u7e2e\u30d8\u30c3\u30c0\u30d6\u30ed\u30c3\u30af\u3092\u53d7\u4fe1\u3059\u308b\u3068\u30e1\u30e2\u30ea\u67af\u6e07\u306b\u9665\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u3002\n\n\u307e\u305fHTTP/1.1\u30e1\u30c3\u30bb\u30fc\u30b8\u306e\u89e3\u6790\u51e6...", "creation_timestamp": "2026-08-01T23:27:12.054272Z"}, {"uuid": "9ca61218-203e-4841-89fb-1a06afd5d16c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mo7yf3f7kw26", "content": "\ud83d\udfe0 CVE-2026-54420 - High (8.5)\n\nLiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mish...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54420/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-14T05:00:20.216925Z"}, {"uuid": "a30534c7-226b-4e8a-bf53-aefca2fadc18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3moaa4qot2j2m", "content": "\u8106\u5f31\u6027\uff1a\u8907\u6570\u306eAPI\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u306b\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u306e\u53ef\u80fd\u6027\u3002\u5f71\u97ff\uff1a\u8a8d\u8a3c\u306a\u3057\u3067\u306e\u60c5\u5831\u6f0f\u6d29\u3084\u4e0d\u6b63\u64cd\u4f5c\u306e\u6050\u308c\u3002\u5bfe\u8c61\uff1a\u7279\u5b9a\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u3002\nCVE-2026-54420 CVSS 8.5 | HIGH", "creation_timestamp": "2026-06-14T07:18:49.767863Z"}, {"uuid": "e581381f-972d-49bc-9080-03d3c9aab4fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54421", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moaauv2ng32f", "content": "CVE-2026-54421 - OpenStack Ironic Information Disclosure\nCVE ID : CVE-2026-54421\n \n Published : June 14, 2026, 4:16 a.m. | 1\u00a0hour, 25\u00a0minutes ago\n \n Description : In OpenStack Ironic through 35.0.1, when applying a PATCH to update fields in volume properties the user is author...", "creation_timestamp": "2026-06-14T07:32:19.423400Z"}, {"uuid": "ac7a1508-965c-4964-8776-65e55693f052", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54420", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116747640761245833", "content": "\u26a0\ufe0f CVE-2026-54420: HIGH-severity symlink vulnerability in LiteSpeed cPanel Plugin v2.3 on CloudLinux/CageFS shared hosting. Exploited in the wild \u2014 no patch yet. Restrict FTP/web shell access & monitor for suspicious activity. https://radar.offseq.com/threat/cve-2026-54420-cwe-61-unix-symbolic-link-symlink-f-9e9ca8f9 #OffSeq #Vulnerability #LiteSpeed", "creation_timestamp": "2026-06-14T09:02:38.419474Z"}, {"uuid": "6d568fb2-58b6-404d-a138-c2ab14877eef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54421", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116747994648309538", "content": "\u26a0\ufe0f CVE-2026-54421 | Medium severity in OpenStack Ironic <=35.0.1: PATCH requests may leak iSCSI creds due to improper redaction. Restrict PATCH ops to trusted admins, monitor access, and follow vendor advisories. https://radar.offseq.com/threat/cve-2026-54421-cwe-212-improper-removal-of-sensiti-6e0b0746 #OffSeq #OpenStack #Infosec", "creation_timestamp": "2026-06-14T10:30:25.432114Z"}, {"uuid": "dbb5bfd9-7603-40d2-831e-882a87ef2131", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54421", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3moaktehsog2a", "content": "OpenStack Ironic <=35.0.1 MEDIUM vuln: PATCH updates may leak sensitive info (iSCSI creds). Restrict PATCH ops, monitor usage, and check advisories for fixes. https://radar.offseq.com/threat/cve-2026-54421-cwe-212-improper-removal-of-sensiti-6e0b0746 #OffSeq #OpenStack #Vuln", "creation_timestamp": "2026-06-14T10:30:26.241099Z"}, {"uuid": "e90f9f96-a58b-439d-82a6-6325dd30f5f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/litespeedtech.bsky.social/post/3modzl74prs2m", "content": "The CVE that was published today for LiteSpeed's WHM plugin prior to v2.4.8 refers to the same vulnerability we disclosed (and patched) two weeks ago. CVE-2026-54420: blog.litespeedtech.com/2026/06/01/s...", "creation_timestamp": "2026-06-15T19:32:18.703198Z"}, {"uuid": "b1dd8791-5fff-4207-a695-bcae173236d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3modzkrpxeg2e", "content": "\ud83d\uded1 CVE-2026-54420\nLiteSpeed cPanel Plugin\nCVSS 8.5 / EPSS 0% / KEV: No\nTL;DR: LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before\u2026\nhttps://cvesentinel.com/report/CVE-2026-54420?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-06-15T19:32:10.662473Z"}, {"uuid": "c3c9d0a9-e68a-4a96-8346-3015c2a30331", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/boredchilada.bsky.social/post/3moe3lw55qm2k", "content": "~Cisa~\nCISA added CVE-2026-20262 (Cisco SD-WAN) and CVE-2026-54420 (LiteSpeed cPanel) to its KEV catalog due to active exploitation.\n-\nIOCs: CVE-2026-20262, CVE-2026-54420\n-\n#CISA #CVE202620262 #CVE202654420 #KEV #threatintel", "creation_timestamp": "2026-06-15T20:08:29.042672Z"}, {"uuid": "2cccc4bd-d629-4172-abd3-5f5c6b093a25", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0dac6024-d454-4978-8cb0-be4589ad3b06", "content": "", "creation_timestamp": "2026-06-15T20:00:01.853106Z"}, {"uuid": "c262c9e3-70b1-4f84-9c8c-c2e42e7623b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/6747335", "content": "2026-06-15: [CVE-2026-54420] LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following VulnerabilityLiteSpeed cPanel plugin contains a UNIX symbolic link (Symlink) following vulnerability that could allow a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS.\ncisakev", "creation_timestamp": "2026-06-15T20:17:00.876873Z"}, {"uuid": "e73a84c8-f723-41db-bc6a-3bc31270b961", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3moeaket3nd2t", "content": "\ud83d\udccc CVE-2026-54420 - LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provided by a user with FTP or web sh... https://www.cyberhub.blog/cves/CVE-2026-54420", "creation_timestamp": "2026-06-15T21:37:05.837380Z"}, {"uuid": "0fc776f6-ca7c-4354-b040-1841b4e07441", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3moedp3mtrz2y", "content": "Active exploitation verified by CISA: CVE-2026-54420 exposes LiteSpeed cPanel environments to critical symlink privilege escalation. Threat actors are actively breaching shared hosting isolation. Read the full high-authority C-Suite briefing from The Cyber Mind Co. to harden your perimeter right\u2026", "creation_timestamp": "2026-06-15T22:33:26.163368Z"}, {"uuid": "3a4547b9-1eb8-495c-9dcd-ebbcaed7ff6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3moejkci7lu2s", "content": "CISA\u304c\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u60272\u4ef6\u3092\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0 \n\nCVE-2026-20262 Cisco Catalyst SD-WAN Manager\u306e\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u307e\u305f\u306f\u30d1\u30b9\u306e\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u8106\u5f31\u6027\nCVE-2026-54420 LiteSpeed cPanel\u30d7\u30e9\u30b0\u30a4\u30f3\u306eUNIX\u30b7\u30f3\u30dc\u30ea\u30c3\u30af\u30ea\u30f3\u30af\uff08Symlink\uff09\u306e\u8106\u5f31\u6027 \n\nwww.cisa.gov/news-events/...", "creation_timestamp": "2026-06-16T00:18:07.102734Z"}, {"uuid": "d51e9640-81b6-4ea9-9fe3-31f5f0fd6a13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3moektpzpbt2z", "content": "Stop symlink privilege escalation in its tracks. The Cyber Mind Co. has deployed the T-Suite Defense Playbook for CVE-2026-54420, featuring kernel overrides and FIM rules to protect LiteSpeed cPanel environments. Lock down your shared hosting infrastructure now: https://thecybermind.co/q7ni", "creation_timestamp": "2026-06-16T00:41:17.667182Z"}, {"uuid": "d9ecc51e-b11b-4cb6-803c-fd51e957a962", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mof6zby5ej2d", "content": "CISA added CVE-2026-54420 in LiteSpeed cPanel Plugin to KEV, requiring FCEB agencies to patch by June 18, 2026.\n", "creation_timestamp": "2026-06-16T06:42:18.895358Z"}, {"uuid": "84af9a30-3bdd-4eda-beb5-6c333808870e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://thehackernews.com/2026/06/cisa-flags-litespeed-cpanel-plugin-flaw.html", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a security flaw impacting LiteSpeed cPanel Plugin to its Known Exploited Vulnerabilities (KEV) catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to apply the fixes by June 18, 2026.\n\nThe vulnerability in question is CVE-2026-54420 (CVSS score: 8.5), which has been described as a case of privilege", "creation_timestamp": "2026-06-16T03:41:52.000000Z"}, {"uuid": "d549912e-f9a3-441c-8165-44c70874e3e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mofdgidggn2d", "content": "\ud83d\udea8 [CRITICAL INFRASTRUCTURE ALERT]: CVE-2026-54420\n\n\u2022 CVE ID: CVE-2026-54420\n\u2022 CVSS Score: 8.5 (High)\n\u2022 Affected: LiteSpeed WHM Plug\n\nhttps://securitycyber.uk", "creation_timestamp": "2026-06-16T08:01:16.008600Z"}, {"uuid": "2d37d8ce-4a37-48e4-8b71-750516bdd326", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3mofmr2cp5r2f", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has given U.S. government agencies three days to secure their servers against an actively exploited vulnerability (CVE-2026-54420) in the LiteSpeed cPanel user-end plugin.", "creation_timestamp": "2026-06-16T10:48:15.010324Z"}, {"uuid": "e99d5a75-6ff3-4a6f-8796-45028e5574b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mofn2u22ym2q", "content": "CISA\u304c\u653b\u6483\u306b\u60aa\u7528\u3055\u308c\u305fcPanel\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u5225\u306e\u8106\u5f31\u6027\u306b\u8b66\u544a\n\n\u7c73\u56fd\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001LiteSpeed cPanel\u30e6\u30fc\u30b6\u30fc\u30a8\u30f3\u30c9\u30d7\u30e9\u30b0\u30a4\u30f3\u306b\u5b58\u5728\u3059\u308b\u7a4d\u6975\u7684\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u8106\u5f31\u6027\uff08CVE-2026-54420\uff09\u3078\u306e\u5bfe\u51e6\u306b\u3064\u3044\u3066\u3001\u7c73\u56fd\u653f\u5e9c\u6a5f\u95a2\u306b3\u65e5\u4ee5\u5185\u306e\u30b5\u30fc\u30d0\u30fc\u4fdd\u8b77\u3092\u547d\u3058\u307e\u3057\u305f\u3002 CVE-2026-48172\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044...", "creation_timestamp": "2026-06-16T10:54:12.785467Z"}, {"uuid": "de645ec2-c5c4-4c23-b77e-d6454323fbf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54420", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mofqovg7e62n", "content": "\ud83d\udcf0 CISA Keluarkan Peringatan Darurat: Celah Keamanan cPanel LiteSpeed Aktif Dieksploitasi Massal\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/06/16/celah-plugin-cpanel-litespeed-dieksploitasi-massal/\n\n#cisa #cpanel #cve-2026-48172 #cve-2026-54420 #exploit #gadget #hardware #hosti", "creation_timestamp": "2026-06-16T11:58:37.384621Z"}, {"uuid": "df7c88f3-99b0-43ee-b88a-da3804ad4a0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3mofschtphv2l", "content": "Also watch the KEV layer.\n\nCISA added Cisco Catalyst SD-WAN Manager CVE-2026-20262 and LiteSpeed cPanel Plugin CVE-2026-54420 on June 15.\n\nCisco = enterprise control plane risk.\nLiteSpeed = shared hosting blast radius.\n\nRefs:\nwww.cisa.gov/sites/defaul...\nsec.cloudapps.cisco.com/security/cen...", "creation_timestamp": "2026-06-16T12:27:37.748241Z"}, {"uuid": "ac16efc3-90bd-49b4-a871-6f31c1d3069f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3mofscjsx7o2m", "content": "- LiteSpeed advisory CVE-2026-54420: blog.litespeedtech.com/2026/06/01/s...\n- FIRST EPSS CVE-2026-54420: api.first.org/data/v1/epss...", "creation_timestamp": "2026-06-16T12:27:39.448080Z"}, {"uuid": "4b274e8b-38ba-4332-bc6c-388094c98cea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mog5epzerg42", "content": "LiteSpeed cPanel CVE-2026-54420 Escalates to Root on Shared Hosts CISA added LiteSpeed cPanel CVE-2026-54420 to its KEV catalog with a 48-hour deadline as exploitation of the unauthenticated REST A...\n\n#Resources #Application #Security #CVE [\u2026] \n\n[Original post on dailysecurityreview.com]", "creation_timestamp": "2026-06-16T15:45:46.083662Z"}, {"uuid": "64b81a3b-3efb-4bc2-81a2-e3ad01761589", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevato-sfruttamento-di-vulnerabilita-in-prodotto-litespeed-cpanel-plugin", "content": "Rilevato sfruttamenento attivo in rete della CVE-2026-54420 presente in cPanel, plugin del noto software LiteSpeed Web Server. Tale vulnerabilit\u00e0, qualora sfruttata, potrebbe consentire ad un utente remoto malintenzionato, gi\u00e0 in possesso di un accesso iniziale con privilegi limitati, di elevare i propri privilegi sui sistemi interessati.", "creation_timestamp": "2026-06-16T12:26:30.000000Z"}, {"uuid": "9fff630a-03a6-45ba-96e5-d4e0e70a6068", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3moggylk4qh2f", "content": "\ud83d\udce2 CISA KEV ALERT: A LiteSpeed cPanel plugin flaw, CVE-2026-54420, is being actively exploited for root privilege escalation on shared servers. Federal agencies must patch by June 18. Hosting providers, check your systems! #CVE #KEV #CISA #CyberSecurity\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-06-16T18:37:46.627747Z"}, {"uuid": "47d99436-5688-4c9c-8feb-192724b3a0d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/iberianm.bsky.social/post/3moglmdq6l626", "content": "CISA adds LiteSpeed cPanel Plugin CVE-2026-54420 (privilege escalation) to KEV. Action: patch by June 18, 2026 and verify affected systems are updated. #Cybersecurity #Vulnerability #ThreatIntel\n\nSource: https://thehackernews.com/2026/06/cisa-flags-litespeed-cpanel-plugin-flaw.html", "creation_timestamp": "2026-06-16T20:00:22.712483Z"}, {"uuid": "071eb57c-305b-4ed8-9033-c4f9ad67e6d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54421", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mognqwzqvm2f", "content": "[OSSA-2026-023] Ironic: Sensitive properties returned unredacted in POST and PATCH HTTP responses (CVE-2026-54421)", "creation_timestamp": "2026-06-16T20:38:44.332104Z"}, {"uuid": "9aafbcf9-aa60-4ae3-b021-b9e58e438c4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mohbhd6yr22h", "content": "CISA warns of another cPanel plugin flaw exploited in attacks\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has given U.S. government agencies three days to secure their servers against an actively exploited vulnerability (CVE-2026-54420) in the LiteSpeed cPane\u2026\n#hackernews #news", "creation_timestamp": "2026-06-17T02:31:16.765664Z"}, {"uuid": "88daf337-a0a0-49eb-898a-6cfb973bc9a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mohbhfp4ax2n", "content": "Top 3 CVE for last 7 days:\nCVE-2026-35273: 62 interactions\nCVE-2026-54420: 26 interactions\nCVE-2025-10263: 25 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-54420: 21 interactions\nCVE-2026-20262: 8 interactions\nCVE-2026-48558: 8 interactions\n", "creation_timestamp": "2026-06-17T02:31:19.321996Z"}, {"uuid": "6d4b48ed-0df3-4426-94e4-6b3d4e57904d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/cybergeodigest.bsky.social/post/3mohwk4awoz2a", "content": "Today's CyberGeoDigest \u2014 20 stories\n\nTop: CISA Orders Agencies to Patch CVE-2026-54420 in LiteSpeed cPanel Plugin\n\n#InfoSec #CVE #CyberSecurity", "creation_timestamp": "2026-06-17T08:48:38.508656Z"}, {"uuid": "a827a54e-0bbc-4b65-b041-847a76563657", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mohx74eegi2l", "content": "Joomla JCE CVE-2026-48907 and LiteSpeed cPanel CVE-2026-54420 are being actively exploited, enabling file uploads, PHP execution, and possible root escalation on shared hosting servers. #Joomla #LiteSpeed #CISA", "creation_timestamp": "2026-06-17T09:00:24.039309Z"}, {"uuid": "a595e4c1-19c7-4ee7-b51b-d43c42ea5917", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mojrwgzt3f2d", "content": "Top 3 CVE for last 7 days:\nCVE-2026-35273: 64 interactions\nCVE-2026-54420: 26 interactions\nCVE-2026-39987: 20 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-9697: 16 interactions\nCVE-2026-50656: 13 interactions\nCVE-2026-42824: 11 interactions\n", "creation_timestamp": "2026-06-18T02:31:23.257160Z"}, {"uuid": "3577620f-1a10-41db-bd9a-a208b786ce9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3momciyt73y2g", "content": "Top 3 CVE for last 7 days:\nCVE-2026-35273: 34 interactions\nCVE-2026-54420: 26 interactions\nCVE-2026-50656: 25 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-50656: 12 interactions\nCVE-2026-49257: 4 interactions\nCVE-2026-10736: 3 interactions\n", "creation_timestamp": "2026-06-19T02:33:25.220800Z"}, {"uuid": "b956644c-b9ca-444c-8a68-77f7ac1ccb88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "Telegram/jGgWbq3oWlyFT1_i5DpW7nywmMKHqNT57qTTP6bkXcS9oQ", "content": "", "creation_timestamp": "2026-06-16T07:09:12.000000Z"}, {"uuid": "3b5a930f-8ac3-4884-b12e-aa18ddf86564", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/301494c7-8243-48b7-b1b0-7ee32af1efbd", "content": "", "creation_timestamp": "2026-06-19T12:45:06.779860Z"}, {"uuid": "d416c39c-6b49-4d99-9a65-fea28eb906ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3monqplodqe27", "content": "CISA flags CVE-2026-54420 in LiteSpeed cPanel Plugin; immediate action required to secure shared hosting environments. #CyberSecurity #LiteSpeed #cPanel #Vulnerability #CISA thedailytechfeed.com/cisa-flags-c...", "creation_timestamp": "2026-06-19T16:20:19.261382Z"}, {"uuid": "4f5345c8-0559-4ae0-9525-176ce3a41800", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mooa2bnvpea2", "content": "CISA Adds LiteSpeed cPanel Plugin Vulnerability to KEV List Following Active Exploitation CISA has added a critical LiteSpeed cPanel Plugin vulnerability, tracked as CVE-2026-54420, to its Known Ex...\n\n#Cyber #Security #News #Vulnerability #News #cyber [\u2026] \n\n[Original post on cybersecuritynews.com]", "creation_timestamp": "2026-06-19T20:54:49.925115Z"}, {"uuid": "882d505c-738c-4475-a69a-0f79ae513eaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3moostal2o52d", "content": "Top 3 CVE for last 7 days:\nCVE-2026-50656: 26 interactions\nCVE-2026-54420: 26 interactions\nCVE-2026-20262: 20 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-20253: 6 interactions\nCVE-2026-47729: 5 interactions\nCVE-2026-8713: 4 interactions\n", "creation_timestamp": "2026-06-20T02:30:48.117066Z"}, {"uuid": "2a0672d2-c8d4-48e9-93a0-78bcc2900f19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mopqxcs4mi2l", "content": "CISA added LiteSpeed cPanel Plugin flaw (CVE-2026-54420, CVSS 8.5) to KEV. FCEB agencies must fix it by June 18, 2026, to address privilege escalation risk.", "creation_timestamp": "2026-06-20T11:29:56.802316Z"}, {"uuid": "d9deaf0c-b811-42e4-91ae-8620264dcca0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mordczgryp2n", "content": "Top 3 CVE for last 7 days:\nCVE-2026-50656: 27 interactions\nCVE-2026-54420: 27 interactions\nCVE-2026-20262: 22 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-9082: 12 interactions\nCVE-2026-11551: 5 interactions\nCVE-2026-4020: 4 interactions\n", "creation_timestamp": "2026-06-21T02:33:26.926411Z"}, {"uuid": "550de4d4-af85-45b3-baa4-5be08c7ff4dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mottrv2xxt2l", "content": "Top 3 CVE for last 7 days:\nCVE-2026-50656: 28 interactions\nCVE-2026-20262: 25 interactions\nCVE-2026-54420: 25 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-20253: 6 interactions\nCVE-2026-25253: 4 interactions\nCVE-2026-35469: 4 interactions\n", "creation_timestamp": "2026-06-22T02:31:15.826355Z"}, {"uuid": "bbb01772-681d-4821-87ec-0607ad947f92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mowe7iydwb2a", "content": "Top 3 CVE for last 7 days:\nCVE-2026-50656: 28 interactions\nCVE-2026-20262: 23 interactions\nCVE-2026-54420: 23 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-4020: 5 interactions\nCVE-2026-6645: 5 interactions\nCVE-2025-66336: 4 interactions\n", "creation_timestamp": "2026-06-23T02:30:31.949886Z"}, {"uuid": "b4725868-0b72-4ada-8479-de13c3f84037", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f26bd3cc-065a-461e-9c0e-cc278b73e637", "content": "", "creation_timestamp": "2026-06-23T14:02:57.735167Z"}, {"uuid": "68d2fea1-d419-4063-8082-cbfb2d7ea8a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54428", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mplymmliqs2x", "content": "CVE-2026-54428: Apache HttpComponents Core: HPackDecoder Unlimited Header List Size Before SETTINGS ACK", "creation_timestamp": "2026-07-01T17:01:40.556510Z"}, {"uuid": "eb21ae52-59ef-4f6d-9392-8d39ade2c660", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54428", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnj74yvvv2k", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54428: \u041e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0431\u0435\u0437\u0433\u0440\u0430\u043d\u0438\u0447\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u0432 HTTP/2 HPACK \u0434\u0435\u043a\u043e\u0434\u0435\u0440\u0435\n\n\n\nhttps://kripta.biz/posts/34FCBD41-6A6B-4E7F-A45D-1789658F6B2E", "creation_timestamp": "2026-07-02T07:31:01.325997Z"}, {"uuid": "db0846f4-4453-45fa-9e5e-d432ad99aea7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54428", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mpogcpwcqq2e", "content": "Apache HttpComponents Core vulnerabilities CVE-2026-54399 and CVE-2026-54428 allow remote denial of service through memory exhaustion. Upgrade now.\n\n#Apache #HttpComponents #DoS #CVE202654399 #CyberSecurity", "creation_timestamp": "2026-07-02T16:12:01.334920Z"}, {"uuid": "914e7c17-550b-4594-a75e-639b7fd7508f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54424", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mprye52cxm24", "content": "Unity Parsec (Windows\u7248) v2026-05-04.0\u4ee5\u524d\u306b\u7279\u6a29API\u306e\u4e0d\u9069\u5207\u306a\u4f7f\u7528\u306e\u8106\u5f31\u6027\u3002\u653b\u6483\u8005\u306f\u6a29\u9650\u6607\u683c\u306e\u53ef\u80fd\u6027\u304c\u3042\u308a\u3001NT AUTHORITY\\SYSTEM\u6a29\u9650\u3067\u5b9f\u884c\u3055\u308c\u2026\nCVE-2026-54424 CVSS 8.4 | HIGH", "creation_timestamp": "2026-07-04T02:12:57.723959Z"}, {"uuid": "2d0e03c0-53fc-4285-9a62-cd79a537fa9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54424", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mps7obvjwu2e", "content": "CVE-2026-54424 - Parsec Elevation of Privilege via Privileged API Misuse\nCVE ID : CVE-2026-54424\n \n Published : July 4, 2026, 12:45 a.m. | 3\u00a0hours, 2\u00a0minutes ago\n \n Description : An Incorrect Use of Privileged APIs vulnerability in Unity Parsec on Windows hosts leads to a pote...", "creation_timestamp": "2026-07-04T04:23:51.179422Z"}, {"uuid": "067ce04a-e56c-46ca-9ec6-b0362f4c6163", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54424", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-54424", "content": "", "creation_timestamp": "2026-07-04T05:15:04.216661Z"}, {"uuid": "41ab164e-9312-4cd5-b83d-58984c3693ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54424", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mptgmnyrsc2e", "content": "\ud83d\udfe0 CVE-2026-54424 - High (8.4)\n\nAn Incorrect Use of Privileged APIs vulnerability in Unity Parsec on Windows hosts leads to a pot...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54424/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-04T16:00:53.283676Z"}, {"uuid": "f24a3e29-5287-411a-88d2-26a3c51965cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54423", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mq5gs5iuht24", "content": "[OSSA-2026-025] Ironic: RBAC Bypass in IPMI Raw Command Execution (CVE-2026-54423)", "creation_timestamp": "2026-07-08T15:30:34.070234Z"}, {"uuid": "132cff57-1ea1-4be0-95d1-c237a1d4cb10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54423", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqbeizh3yj2c", "content": "\ud83d\udfe0 CVE-2026-54423 - High (8.2)\n\nIn OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using the IPMI...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54423/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-10T05:00:29.017968Z"}, {"uuid": "10a94e0b-b99d-44e2-a22e-14933b114b26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54423", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbgtcokt226", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54423 \u0432 OpenStack Ironic: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/F8BF9A61-5471-459C-A283-08AD904E57D4", "creation_timestamp": "2026-07-10T05:41:51.855965Z"}, {"uuid": "ec295da4-6692-42a3-9418-5a0512240bf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54423", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqbhy3xccr2k", "content": "CVE-2026-54423 - OpenStack Ironic IPMI Access Control Bypass\nCVE ID : CVE-2026-54423\n \n Published : July 10, 2026, 4:17 a.m. | 14\u00a0minutes ago\n \n Description : In OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using the IPMI management interface...", "creation_timestamp": "2026-07-10T06:02:26.530579Z"}, {"uuid": "32906842-46a8-4049-9412-3ba69d897384", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54423", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqbxhqhblt2f", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54423 \u0432 OpenStack Ironic: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/32B80827-5FC3-49EF-8318-6B9B7CF3729B", "creation_timestamp": "2026-07-10T10:39:37.387515Z"}, {"uuid": "d9e021f9-5754-4a18-8cb1-5dd1ec311101", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54423", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdfyao3qs2x", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54423 \u0432 OpenStack Ironic: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/B352A32E-37DA-40B9-95CC-F428B4315992", "creation_timestamp": "2026-07-11T00:32:03.535020Z"}, {"uuid": "5f724d0c-faf2-4e0e-83f8-a4f0bf65507b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqfsyi6xqc2i", "content": "CISA Adds Two Known Exploited Vulnerabilities to Catalog\nRelease Date June 15, 2026\n\nCVE-2026-20262 Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability\nCVE-2026-54420 LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability", "creation_timestamp": "2026-07-11T23:30:09.491925Z"}, {"uuid": "c9b214cb-a20d-43b6-8fbb-8c8b5dbd2fed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqft5zacqs2i", "content": "\u300cLiteSpeed cPanel Plugin\u300d\u306b\u6a29\u9650\u6607\u683c\u306e\u8106\u5f31\u6027 - \u3059\u3067\u306b\u60aa\u7528\u3082\n\n\u300cLiteSpeed Web Server\u300d\u5229\u7528\u8005\u5411\u3051\u306e\u30d7\u30e9\u30b0\u30a4\u30f3\u300cLiteSpeed cPanel Plugin\u300d\u306b\u3042\u3089\u305f\u306a\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u30025\u6708\u306b\u5224\u660e\u3057\u305f\u8106\u5f31\u6027\u3068\u306f\u7570\u306a\u308b\u8106\u5f31\u6027\u3067\u3001\u60aa\u7528\u3082\u78ba\u8a8d\u3055\u308c\u3066\u3044\u308b\u3002\n\n\u30b7\u30f3\u30dc\u30ea\u30c3\u30af\u30ea\u30f3\u30af\u306e\u51e6\u7406\u306b\u8d77\u56e0\u3057\u3001root\u6a29\u9650\u3078\u306e\u6607\u683c\u304c\u53ef\u80fd\u3068\u306a\u308b\u8106\u5f31\u6027\u300cCVE-2026-54420\u300d\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3082\u306e\u3002FTP\u3084\u30a6\u30a7\u30d6\u30b7\u30a7\u30eb\u306e\u30a2\u30af\u30bb\u30b9\u6a29\u9650\u3092\u6301\u3064\u5834\u5408\u306b\u60aa\u7528\u304c\u53ef\u80fd\u3067\u3001\u300cCloudLinux\u300d\u3068\u300cCageFS\u300d\u3092\u5229\u7528\u3059\u308b\u5171\u6709\u30db\u30b9\u30c6\u30a3\u30f3\u30b0\u30b5\u30fc\u30d0\u3067\u5f71\u97ff\u3092\u53d7\u3051\u308b\u3068\u3044\u3046\u3002", "creation_timestamp": "2026-07-11T23:33:14.712067Z"}, {"uuid": "ee7fd9d6-82c9-46fa-9157-74f2d79f9411", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqftyyvhgc2i", "content": "\u8106\u5f31\u6027\u306e\u60aa\u7528\u30ab\u30bf\u30ed\u30b0\u306b2\u4ef6\u3092\u3042\u3089\u305f\u306b\u8ffd\u52a0 - \u7c73\u5f53\u5c40\n\n\u7c73\u5f53\u5c40\u306f\u3001\u30db\u30b9\u30c6\u30a3\u30f3\u30b0\u74b0\u5883\u5411\u3051\u30d7\u30e9\u30b0\u30a4\u30f3\u3084Cisco\u306eSD-WAN\u7ba1\u7406\u88fd\u54c1\u306b\u5224\u660e\u3057\u305f\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u3057\u3066\u6ce8\u610f\u559a\u8d77\u3092\u884c\u3063\u305f\u3002\n\n\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u73fe\u5730\u6642\u95932026\u5e746\u670815\u65e5\u3001\u300c\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\uff08KEV\uff09\u300d\u30782\u4ef6\u306e\u8106\u5f31\u6027\u300cCVE-2026-54420\u300d\u300cCVE-2026-20262\u300d\u3092\u8ffd\u52a0\u3057\u305f\u3002\n\n\u300cCVE-2026-54420\u300d\u306f\u3001\u300cLiteSpeed Web Server\u300d\u306e\u5229\u7528\u8005\u5411\u3051\u306b\u63d0\u4f9b\u3055\u308c\u3066\u3044\u308b\u300cLiteSpeed cPanel Plugin\u300d\u306b\u660e\u3089\u304b...", "creation_timestamp": "2026-07-11T23:48:21.207330Z"}, {"uuid": "3a58a093-6ffe-4917-866f-bd240735e595", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqfwicayb22i", "content": "CISA\u306f\u3001\u653b\u6483\u306b\u60aa\u7528\u3055\u308c\u305f\u5225\u306ecPanel\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\u8b66\u544a\u3092\u767a\u3057\u305f\u3002\n\n\u7c73\u56fd\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001LiteSpeed cPanel\u306e\u30e6\u30fc\u30b6\u30fc\u30a8\u30f3\u30c9\u30d7\u30e9\u30b0\u30a4\u30f3\u306b\u5b58\u5728\u3059\u308b\u3001\u73fe\u5728\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u8106\u5f31\u6027\uff08CVE-2026-54420\uff09\u304b\u3089\u30b5\u30fc\u30d0\u30fc\u3092\u4fdd\u8b77\u3059\u308b\u305f\u3081\u3001\u7c73\u56fd\u653f\u5e9c\u6a5f\u95a2\u306b3\u65e5\u9593\u306e\u7336\u4e88\u3092\u4e0e\u3048\u305f\u3002\n\nCVE-2026-48172\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u306f\u3001Namecheap\u306b\u3088\u3063\u3066\u5831\u544a\u3055\u308c\u3001FTP\u307e\u305f\u306fWeb\u30b7\u30a7\u30eb\u3078\u306e\u30a2\u30af\u30bb\u30b9\u6a29\u3092\u6301\u3064\u653b\u6483\u8005\u304c\u3001CloudLinux/CageFS\u3092\u5b9f\u884c\u3057\u3066\u3044\u308b\u5171\u6709\u30db\u30b9\u30c6\u30a3\u30f3\u30b0\u30b5\u30fc\u30d0\u30fc\u4e0a\u3067r...", "creation_timestamp": "2026-07-12T00:32:44.918768Z"}, {"uuid": "fad89e7a-0525-46f7-b8f2-f132827dbe05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54424", "type": "seen", "source": "https://t.me/GithubRedTeam/91664", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54424\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a tomadimitrie\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C++\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-02 22:17:37\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nExploiting Parsec for Windows to gain SYSTEM privileges\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:14.024673Z"}, {"uuid": "d8c3db65-a3f2-4892-ba89-d55fb59f04cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://t.me/GithubRedTeam/89493", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54420-LiteSpeed-Symlink-Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a fevar54\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-18 15:24:37\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nA vulnerability in LiteSpeed cPanel Plugin before 2.4.8 and WHM Plugin before 5.3.2.0 mishandles symlinks provided by a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:23.830182Z"}, {"uuid": "c0de7da5-c98c-444d-a13d-3b0de1121bb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://t.me/BleepingComputer/24911", "content": "\u200aCISA warns of another cPanel plugin flaw exploited in attacks\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has given U.S. government agencies three days to secure their servers against an actively exploited vulnerability (CVE-2026-54420) in the LiteSpeed cPanel user-end plugin. [...]\n\nhttps://www.bleepingcomputer.com/news/security/cisa-warns-of-another-actively-exploited-cpanel-plugin-flaw/", "creation_timestamp": "2026-07-14T00:00:06.843304Z"}, {"uuid": "6fa2f507-ef44-45a2-8c61-77d7f3b81b2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54424", "type": "seen", "source": "https://t.me/GithubRedTeam/91664", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54424\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a tomadimitrie\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C++\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-02 22:17:37\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nExploiting Parsec for Windows to gain SYSTEM privileges\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:21.914096Z"}, {"uuid": "4a755f88-169c-471a-a31b-2d6ae80022ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://t.me/GithubRedTeam/89493", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54420-LiteSpeed-Symlink-Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a fevar54\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-18 15:24:37\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nA vulnerability in LiteSpeed cPanel Plugin before 2.4.8 and WHM Plugin before 5.3.2.0 mishandles symlinks provided by a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:39.624908Z"}, {"uuid": "70431112-0936-41c4-9744-0eda7220dfcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54429", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mqlzeisz3w2x", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-54429](https://cert-portal.siemens.com/productcert/html/ssa-828211.html)\nA vulnerabilit...\nhttps://cert-portal.siemens.com/productcert/html/ssa-828211.html #Vulnerability #CVE #ZeroDay", "creation_timestamp": "2026-07-14T10:40:14.832436Z"}, {"uuid": "75de76e3-e4aa-434e-955d-e21d7f223804", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54429", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqm64qfivx2k", "content": "CVE-2026-54429 - SIMATIC S7-PLCSIM Advanced Denial of Service Vulnerability\nCVE ID : CVE-2026-54429\n \n Published : July 14, 2026, 10:16 a.m. | 1\u00a0hour, 14\u00a0minutes ago\n \n Description : A vulnerability has been identified in SIMATIC S7-PLCSIM Advanced (All versions). Affected dev...", "creation_timestamp": "2026-07-14T12:05:26.489412Z"}, {"uuid": "dba8d06b-9535-40e5-8466-5bce82799a57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54429", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-per-prodotti-siemens-24", "content": "", "creation_timestamp": "2026-07-14T12:45:10.021430Z"}, {"uuid": "bc453a45-053a-4acc-a5d3-0e1c2d891513", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/89493", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54420-LiteSpeed-Symlink-Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a fevar54\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-18 15:24:37\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nA vulnerability in LiteSpeed cPanel Plugin before 2.4.8 and WHM Plugin before 5.3.2.0 mishandles symlinks provided by a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:08.618705Z"}, {"uuid": "b3a6495e-007c-4be1-a74e-508e3fd04d6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54424", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/91664", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54424\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a tomadimitrie\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C++\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-02 22:17:37\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nExploiting Parsec for Windows to gain SYSTEM privileges\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:28.123883Z"}, {"uuid": "849a8697-4b1b-4ce8-86ed-6952596f8692", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "exploited", "source": "https://t.me/BleepingComputer/24911", "content": "\u200aCISA warns of another cPanel plugin flaw exploited in attacks\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has given U.S. government agencies three days to secure their servers against an actively exploited vulnerability (CVE-2026-54420) in the LiteSpeed cPanel user-end plugin. [...]\n\nhttps://www.bleepingcomputer.com/news/security/cisa-warns-of-another-actively-exploited-cpanel-plugin-flaw/", "creation_timestamp": "2026-07-15T00:00:36.941033Z"}, {"uuid": "a168387f-c6fa-4cf3-9ea4-a37c1a553447", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://t.me/thehackernews/9250", "content": "\ud83d\udea8 A shared hosting flaw just landed on CISA\u2019s exploited list.\n\nCVE-2026-54420 affects the LiteSpeed cPanel Plugin and can let a user with FTP or web shell access gain root on CloudLinux/CageFS servers.\n\nFederal agencies must patch by June 18, 2026.\n\nRead: https://thehackernews.com/2026/06/cisa-flags-litespeed-cpanel-plugin-flaw.html", "creation_timestamp": "2026-07-15T12:00:04.979954Z"}, {"uuid": "5d51fc20-7618-4894-8807-824ced8458da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9250", "content": "\ud83d\udea8 A shared hosting flaw just landed on CISA\u2019s exploited list.\n\nCVE-2026-54420 affects the LiteSpeed cPanel Plugin and can let a user with FTP or web shell access gain root on CloudLinux/CageFS servers.\n\nFederal agencies must patch by June 18, 2026.\n\nRead: https://thehackernews.com/2026/06/cisa-flags-litespeed-cpanel-plugin-flaw.html", "creation_timestamp": "2026-07-16T00:00:10.031321Z"}, {"uuid": "08262523-d5ab-41dd-a6c6-b33c538f5b7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54429", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mr44uqiedv2o", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-54429 \u0432 SIMATIC S7-PLCSIM Advanced: \u0443\u0433\u0440\u043e\u0437\u0430 \u043e\u0442\u043a\u0430\u0437\u043e\u0443\u0441\u0442\u043e\u0439\u0447\u0438\u0432\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/0F38EF23-EE0B-48F8-AE2F-06C83ADA44C6", "creation_timestamp": "2026-07-20T20:25:35.548969Z"}, {"uuid": "2bd2a943-8441-43e2-8f35-c97fe02dc0dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54422", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mrdmzjdood2n", "content": "[OSSA-2026-028] OpenStack Ironic Python Agent: Credential extraction via malicious container (CVE-2026-54422)", "creation_timestamp": "2026-07-23T20:03:15.069582Z"}, {"uuid": "965c57f4-6078-4dee-b195-ffd83c36ecc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54429", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-03", "content": "", "creation_timestamp": "2026-07-28T16:51:35.731519Z"}]}