{"vulnerability": "cve-2026-70553", "sightings": [{"uuid": "9b3cec41-93e0-4b1e-b306-eff374abfd25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70553", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msbt7x7g372u", "content": "CVE-2026-70553 - maxsite cms\nMaxSite CMS allows attackers to inject malicious code into the application's configuration file, potentially leading to unauthorized access and data theft. This vulnerability\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#maxsitecms #maxsite #CVE #infosec", "creation_timestamp": "2026-08-04T20:14:04.354569Z"}, {"uuid": "0dd99267-d08f-47f9-94b3-d48c2f06cbca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70553", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msbvszpbyv2t", "content": "\ud83d\udd34 CVE-2026-70553 - Critical (9.8)\n\nMaxSite CMS contains a remote code execution vulnerability that allows unauthenticated attackers ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-70553/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-04T21:00:32.637761Z"}, {"uuid": "0040b53c-4463-4a15-9faa-51829c27975c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-70553", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117040312010612030", "content": "CVE-2026-70553: CRITICAL RCE in MaxSite CMS 105.2 (CVSS 9.3). Attackers can inject PHP via POST to the install endpoint, gaining persistent code exec as www-data. Restrict endpoint & monitor traffic until patched. Details: https://radar.offseq.com/threat/cve-2026-70553-improper-control-of-generation-of-code-code-injection-in-maxsite-maxsite-cms-5161bdfb2e6804e9 #OffSeq #CVE #websecurity #RCE", "creation_timestamp": "2026-08-05T01:30:33.470662Z"}, {"uuid": "768d58c2-3506-4d82-a9f8-fe585c379083", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-70553", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mscevw6uqu2o", "content": "MaxSite CMS 105.2 has a CRITICAL RCE vulnerability (CVSS 9.3). Attackers can inject PHP code post-install via install endpoint. Restrict endpoint access & monitor for suspicious POSTs ASAP. https://radar.offseq.com/threat/cve-2026-70553-improper-control-of-generation-of-code-code-injection-in-max...", "creation_timestamp": "2026-08-05T01:30:35.788037Z"}]}