https://vulnerability.circl.lu/sightings/feed 2026-08-03T15:13:59.127915+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/81c1fc72-d39e-4cf0-bcc0-c8d619f14e38/export 2026-08-03T15:13:59.166115+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "81c1fc72-d39e-4cf0-bcc0-c8d619f14e38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/21766", "content": "LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run Scripts as Root \u2013 thehackernews.com\n\nSat, 23 May 2026 15:35:13", "creation_timestamp": "2026-07-20T00:00:22.511477Z"} 2026-07-20T00:00:22.511477+00:00 https://vulnerability.circl.lu/sighting/da86e0d2-248e-4095-8e9f-3ede405d9cb9/export 2026-08-03T15:13:59.169131+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "da86e0d2-248e-4095-8e9f-3ede405d9cb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/21766", "content": "LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run Scripts as Root \u2013 thehackernews.com\n\nSat, 23 May 2026 15:35:13", "creation_timestamp": "2026-07-19T16:00:04.782486Z"} 2026-07-19T16:00:04.782486+00:00 https://vulnerability.circl.lu/sighting/121f393f-9592-4986-93de-814116bf1014/export 2026-08-03T15:13:59.169224+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "121f393f-9592-4986-93de-814116bf1014", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "exploited", "source": "https://t.me/HackerNewscyber/3116", "content": "\u2708\ufe0f\u0647\u0634\u062f\u0627\u0631 CISA \u062f\u0631\u0628\u0627\u0631\u0647 \u062d\u0645\u0644\u0627\u062a \u0641\u0639\u0627\u0644 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0627\u0641\u0632\u0648\u0646\u0647 LiteSpeed \u062f\u0631 cPanel\n\n\ud83c\udfa5 \u0622\u0698\u0627\u0646\u0633 \u0627\u0645\u0646\u06cc\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc \u0622\u0645\u0631\u06cc\u06a9\u0627 (CISA) \u0627\u0639\u0644\u0627\u0645 \u06a9\u0631\u062f\u0647 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0627\u0641\u0632\u0648\u0646\u0647 LiteSpeed cPanel \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2026-48172 \u062f\u0631 \u062d\u0627\u0644 \u062d\u0627\u0636\u0631 \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0648\u0627\u0642\u0639\u06cc \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u06af\u06cc\u0631\u062f \u0648 \u0627\u0632 \u0633\u0627\u0632\u0645\u0627\u0646\u200c\u0647\u0627\u06cc \u062f\u0648\u0644\u062a\u06cc \u062e\u0648\u0627\u0633\u062a\u0647 \u0638\u0631\u0641 \u0633\u0647 \u0631\u0648\u0632 \u0622\u0646 \u0631\u0627 \u0628\u0631\u0637\u0631\u0641 \u06a9\u0646\u0646\u062f.\n\n\ud83c\udfa4\u0627\u06cc\u0646 \u0646\u0642\u0635 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0628\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0648\u0644\u06cc\u0647 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc \u062e\u0648\u062f \u0631\u0627 \u062f\u0631 \u0633\u0631\u0648\u0631\u0647\u0627\u06cc \u0627\u0634\u062a\u0631\u0627\u06a9\u06cc \u0628\u0647 \u0633\u0637\u062d \u06a9\u0627\u0645\u0644 \u0645\u062f\u06cc\u0631\u06cc\u062a\u06cc (root) \u0627\u0631\u062a\u0642\u0627 \u062f\u0647\u0646\u062f \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0633\u06cc\u0633\u062a\u0645 \u0631\u0627 \u062f\u0631 \u062f\u0633\u062a \u0628\u06af\u06cc\u0631\u0646\u062f.\n\n\ud83c\udfa5 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0642\u062f\u06cc\u0645\u06cc\u200c\u062a\u0631 \u0627\u0632 2.4.8 \u0631\u0627 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f \u0648 \u0628\u0647 \u062f\u0644\u06cc\u0644 \u0627\u0645\u06a9\u0627\u0646 \u0646\u0641\u0648\u0630 \u06af\u0633\u062a\u0631\u062f\u0647\u060c \u0628\u0647\u200c\u0639\u0646\u0648\u0627\u0646 \u06cc\u06a9 \u062a\u0647\u062f\u06cc\u062f \u062c\u062f\u06cc \u0628\u0631\u0627\u06cc \u0633\u0631\u0648\u0631\u0647\u0627\u06cc \u0645\u06cc\u0632\u0628\u0627\u0646\u06cc \u0648\u0628 \u0634\u0646\u0627\u062e\u062a\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a.\n\n\u2708\ufe0f@HackerNewsCyber", "creation_timestamp": "2026-07-16T00:00:11.170085Z"} 2026-07-16T00:00:11.170085+00:00 https://vulnerability.circl.lu/sighting/b22479d1-8967-47f1-9316-7e73d5a2181e/export 2026-08-03T15:13:59.169306+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b22479d1-8967-47f1-9316-7e73d5a2181e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "exploited", "source": "https://t.me/HackerNewscyber/3116", "content": "\u2708\ufe0f\u0647\u0634\u062f\u0627\u0631 CISA \u062f\u0631\u0628\u0627\u0631\u0647 \u062d\u0645\u0644\u0627\u062a \u0641\u0639\u0627\u0644 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0627\u0641\u0632\u0648\u0646\u0647 LiteSpeed \u062f\u0631 cPanel\n\n\ud83c\udfa5 \u0622\u0698\u0627\u0646\u0633 \u0627\u0645\u0646\u06cc\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc \u0622\u0645\u0631\u06cc\u06a9\u0627 (CISA) \u0627\u0639\u0644\u0627\u0645 \u06a9\u0631\u062f\u0647 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0627\u0641\u0632\u0648\u0646\u0647 LiteSpeed cPanel \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2026-48172 \u062f\u0631 \u062d\u0627\u0644 \u062d\u0627\u0636\u0631 \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0648\u0627\u0642\u0639\u06cc \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u06af\u06cc\u0631\u062f \u0648 \u0627\u0632 \u0633\u0627\u0632\u0645\u0627\u0646\u200c\u0647\u0627\u06cc \u062f\u0648\u0644\u062a\u06cc \u062e\u0648\u0627\u0633\u062a\u0647 \u0638\u0631\u0641 \u0633\u0647 \u0631\u0648\u0632 \u0622\u0646 \u0631\u0627 \u0628\u0631\u0637\u0631\u0641 \u06a9\u0646\u0646\u062f.\n\n\ud83c\udfa4\u0627\u06cc\u0646 \u0646\u0642\u0635 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0628\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0648\u0644\u06cc\u0647 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc \u062e\u0648\u062f \u0631\u0627 \u062f\u0631 \u0633\u0631\u0648\u0631\u0647\u0627\u06cc \u0627\u0634\u062a\u0631\u0627\u06a9\u06cc \u0628\u0647 \u0633\u0637\u062d \u06a9\u0627\u0645\u0644 \u0645\u062f\u06cc\u0631\u06cc\u062a\u06cc (root) \u0627\u0631\u062a\u0642\u0627 \u062f\u0647\u0646\u062f \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0633\u06cc\u0633\u062a\u0645 \u0631\u0627 \u062f\u0631 \u062f\u0633\u062a \u0628\u06af\u06cc\u0631\u0646\u062f.\n\n\ud83c\udfa5 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0642\u062f\u06cc\u0645\u06cc\u200c\u062a\u0631 \u0627\u0632 2.4.8 \u0631\u0627 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f \u0648 \u0628\u0647 \u062f\u0644\u06cc\u0644 \u0627\u0645\u06a9\u0627\u0646 \u0646\u0641\u0648\u0630 \u06af\u0633\u062a\u0631\u062f\u0647\u060c \u0628\u0647\u200c\u0639\u0646\u0648\u0627\u0646 \u06cc\u06a9 \u062a\u0647\u062f\u06cc\u062f \u062c\u062f\u06cc \u0628\u0631\u0627\u06cc \u0633\u0631\u0648\u0631\u0647\u0627\u06cc \u0645\u06cc\u0632\u0628\u0627\u0646\u06cc \u0648\u0628 \u0634\u0646\u0627\u062e\u062a\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a.\n\n\u2708\ufe0f@HackerNewsCyber", "creation_timestamp": "2026-07-15T13:00:05.353642Z"} 2026-07-15T13:00:05.353642+00:00 https://vulnerability.circl.lu/sighting/745d2795-5888-4730-ab6c-364aa2570a96/export 2026-08-03T15:13:59.169377+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "745d2795-5888-4730-ab6c-364aa2570a96", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c2ceb88c-27b6-4a4d-ae8d-e78c083d60f3", "content": "", "creation_timestamp": "2026-06-23T14:03:37.633367Z"} 2026-06-23T14:03:37.633367+00:00 https://vulnerability.circl.lu/sighting/3560e3a2-fe20-47a8-9b90-7fd84a8ebad1/export 2026-08-03T15:13:59.169442+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "3560e3a2-fe20-47a8-9b90-7fd84a8ebad1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3moxeu4h7j22n", "content": "\u7c73\u56fd\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001LiteSpeed cPanel\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u8106\u5f31\u6027\u3092\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u305f\n\n\u7c73\u56fd\u306e\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001 LiteSpeed cPanel\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u8106\u5f31\u6027CVE-2026-48172\u3092\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\uff08KEV\uff09\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u307e\u3057\u305f\u3002\n\nCVE-2026-48172\uff08CVSS\u30b9\u30b3\u30a210.0\uff09\u306f\u3001LiteSpeed User-End cPanel\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u30d0\u30fc\u30b8\u30e7\u30f32.4.5\u3088\u308a\u524d\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u306b\u5f71\u97ff\u3092\u4e0e\u3048\u3001\u6a29\u9650\u6607\u683c\uff08root\u6a29\u9650\u307e\u3067\uff09...", "creation_timestamp": "2026-06-23T12:14:42.898591Z"} 2026-06-23T12:14:42.898591+00:00 https://vulnerability.circl.lu/sighting/da4debd7-723f-4a9e-b198-8d99b313b7f0/export 2026-08-03T15:13:59.169512+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "da4debd7-723f-4a9e-b198-8d99b313b7f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48170", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mowbt3vgh62r", "content": "\u26a0\ufe0f PATCH NOW\n\nOne account-sync message can corrupt every object in your app.\n\nA widely-used identity library, scim-patch, applies the update straight onto JavaScript's shared prototype, and admin checks can flip true.\n\nPatch to 0.9.1 now. (CVE-2026-48170)", "creation_timestamp": "2026-06-23T01:47:50.618705Z"} 2026-06-23T01:47:50.618705+00:00 https://vulnerability.circl.lu/sighting/b7a6b45b-d005-474e-88a6-e50ceec03c29/export 2026-08-03T15:13:59.169582+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b7a6b45b-d005-474e-88a6-e50ceec03c29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3movob4qkzk2u", "content": "CISA\u306f\u3001\u60aa\u7528\u3055\u308c\u305fLiteSpeed cPanel\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u5373\u6642\u30d1\u30c3\u30c1\u9069\u7528\u3092\u5f37\u304f\u8981\u8acb\n\nCVE-2026-48172 \uff08CVSS\u30b9\u30b3\u30a29.8\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u8106\u5f31\u6027\u306f\u3001\u653b\u6483\u8005\u304croot\u6a29\u9650\u3067\u4efb\u610f\u306e\u30b9\u30af\u30ea\u30d7\u30c8\u3092\u5b9f\u884c\u3067\u304d\u308b\u53ef\u80fd\u6027\u306e\u3042\u308b\u6a29\u9650\u6607\u683c\u306e\u554f\u984c\u3068\u3057\u3066\u8aac\u660e\u3055\u308c\u3066\u3044\u307e\u3059\u3002\n\nLiteSpeed\u306f\u5148\u9031\u3001\u30e6\u30fc\u30b6\u30fc\u5411\u3051\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u30d0\u30fc\u30b8\u30e7\u30f32.4.5\u3067\u3053\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6b20\u9665\u3092\u4fee\u6b63\u3057\u305f\u3002\u540c\u793e\u306f\u3001\u3053\u306e\u6b20\u9665\u304c\u30bc\u30ed\u30c7\u30a4\u653b\u6483\u3068\u3057\u3066\u5b9f\u969b\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u305f\u3053\u3068\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3002LiteSpeed\u306eWHM\u30d7\u30e9\u30b0\u30a4\u30f3\u306f\u5f71\u97ff\u3092\u53d7\u3051\u306a\u3044\u3068\u3057\u3066\u3044\u308b\u3002", "creation_timestamp": "2026-06-22T19:57:47.422627Z"} 2026-06-22T19:57:47.422627+00:00 https://vulnerability.circl.lu/sighting/cd0ed20d-da72-4dc2-b3c9-5904890a3b78/export 2026-08-03T15:13:59.169647+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "cd0ed20d-da72-4dc2-b3c9-5904890a3b78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3movngimltc2u", "content": "\u300cLiteSpeed cPanel Plugin\u300d\u306b\u8106\u5f31\u6027 - \u3059\u3067\u306b\u60aa\u7528\u3082\u3001\u4fb5\u5bb3\u6709\u7121\u306e\u78ba\u8a8d\u3092\n\n\u300cLiteSpeed Web Server\u300d\u5229\u7528\u8005\u5411\u3051\u306e\u30d7\u30e9\u30b0\u30a4\u30f3\u300cLiteSpeed cPanel Plugin\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u305f\u3002\u3059\u3067\u306b\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u3066\u3044\u308b\u3002\n\n\u540c\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u306f\u3001\u300cLiteSpeed Web Server\u300d\u3068\u30db\u30b9\u30c6\u30a3\u30f3\u30b0\u7ba1\u7406\u30c4\u30fc\u30eb\u300ccPanel & WHM\u300d\u3092\u9023\u643a\u3055\u305b\u308b\u305f\u3081\u306e\u30d7\u30e9\u30b0\u30a4\u30f3\u3002\n\n\u300ccPanel\u300d\u306e\u30e6\u30fc\u30b6\u30fc\u30a2\u30ab\u30a6\u30f3\u30c8\u304b\u3089\u3001\u4efb\u610f\u306e\u30b9\u30af\u30ea\u30d7\u30c8\u3092root\u6a29\u9650\u3067\u5b9f\u884c\u3067\u304d\u308b\u8106\u5f31\u6027\u300cCVE-2026-48172\u300d\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002", "creation_timestamp": "2026-06-22T19:42:50.176560Z"} 2026-06-22T19:42:50.176560+00:00 https://vulnerability.circl.lu/sighting/3331489b-91e9-48e8-abea-55ee68d80b81/export 2026-08-03T15:13:59.169723+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "3331489b-91e9-48e8-abea-55ee68d80b81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48172", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3movndyisss2u", "content": "CISA Adds One Known Exploited Vulnerability to Catalog\nRelease Date May 26, 2026\n\nCVE-2026-48172 LiteSpeed cPanel Plugin Privilege Escalation Vulnerability", "creation_timestamp": "2026-06-22T19:41:26.218100Z"} 2026-06-22T19:41:26.218100+00:00