<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-17T07:58:03.156943+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e99d5a75-6ff3-4a6f-8796-45028e5574b2/export</id>
    <title>e99d5a75-6ff3-4a6f-8796-45028e5574b2</title>
    <updated>2026-06-17T07:58:03.164829+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e99d5a75-6ff3-4a6f-8796-45028e5574b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mofn2u22ym2q", "content": "CISA\u304c\u653b\u6483\u306b\u60aa\u7528\u3055\u308c\u305fcPanel\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u5225\u306e\u8106\u5f31\u6027\u306b\u8b66\u544a\n\n\u7c73\u56fd\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001LiteSpeed cPanel\u30e6\u30fc\u30b6\u30fc\u30a8\u30f3\u30c9\u30d7\u30e9\u30b0\u30a4\u30f3\u306b\u5b58\u5728\u3059\u308b\u7a4d\u6975\u7684\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u8106\u5f31\u6027\uff08CVE-2026-54420\uff09\u3078\u306e\u5bfe\u51e6\u306b\u3064\u3044\u3066\u3001\u7c73\u56fd\u653f\u5e9c\u6a5f\u95a2\u306b3\u65e5\u4ee5\u5185\u306e\u30b5\u30fc\u30d0\u30fc\u4fdd\u8b77\u3092\u547d\u3058\u307e\u3057\u305f\u3002 CVE-2026-48172\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044...", "creation_timestamp": "2026-06-16T10:54:12.785467Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e99d5a75-6ff3-4a6f-8796-45028e5574b2/export"/>
    <published>2026-06-16T10:54:12.785467+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/de645ec2-c5c4-4c23-b77e-d6454323fbf2/export</id>
    <title>de645ec2-c5c4-4c23-b77e-d6454323fbf2</title>
    <updated>2026-06-17T07:58:03.164757+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "de645ec2-c5c4-4c23-b77e-d6454323fbf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-54420", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mofqovg7e62n", "content": "\ud83d\udcf0 CISA Keluarkan Peringatan Darurat: Celah Keamanan cPanel LiteSpeed Aktif Dieksploitasi Massal\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/06/16/celah-plugin-cpanel-litespeed-dieksploitasi-massal/\n\n#cisa #cpanel #cve-2026-48172 #cve-2026-54420 #exploit #gadget #hardware #hosti", "creation_timestamp": "2026-06-16T11:58:37.384621Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/de645ec2-c5c4-4c23-b77e-d6454323fbf2/export"/>
    <published>2026-06-16T11:58:37.384621+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/64b81a3b-3efb-4bc2-81a2-e3ad01761589/export</id>
    <title>64b81a3b-3efb-4bc2-81a2-e3ad01761589</title>
    <updated>2026-06-17T07:58:03.164680+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "64b81a3b-3efb-4bc2-81a2-e3ad01761589", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevato-sfruttamento-di-vulnerabilita-in-prodotto-litespeed-cpanel-plugin", "content": "Rilevato sfruttamenento attivo in rete della CVE-2026-54420 presente in cPanel, plugin del noto software LiteSpeed Web Server. Tale vulnerabilit\u00e0, qualora sfruttata, potrebbe consentire ad un utente remoto malintenzionato, gi\u00e0 in possesso di un accesso iniziale con privilegi limitati, di elevare i propri privilegi sui sistemi interessati.", "creation_timestamp": "2026-06-16T12:26:30.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/64b81a3b-3efb-4bc2-81a2-e3ad01761589/export"/>
    <published>2026-06-16T12:26:30+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/df7c88f3-99b0-43ee-b88a-da3804ad4a0c/export</id>
    <title>df7c88f3-99b0-43ee-b88a-da3804ad4a0c</title>
    <updated>2026-06-17T07:58:03.164601+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "df7c88f3-99b0-43ee-b88a-da3804ad4a0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3mofschtphv2l", "content": "Also watch the KEV layer.\n\nCISA added Cisco Catalyst SD-WAN Manager CVE-2026-20262 and LiteSpeed cPanel Plugin CVE-2026-54420 on June 15.\n\nCisco = enterprise control plane risk.\nLiteSpeed = shared hosting blast radius.\n\nRefs:\nwww.cisa.gov/sites/defaul...\nsec.cloudapps.cisco.com/security/cen...", "creation_timestamp": "2026-06-16T12:27:37.748241Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/df7c88f3-99b0-43ee-b88a-da3804ad4a0c/export"/>
    <published>2026-06-16T12:27:37.748241+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ac16efc3-90bd-49b4-a871-6f31c1d3069f/export</id>
    <title>ac16efc3-90bd-49b4-a871-6f31c1d3069f</title>
    <updated>2026-06-17T07:58:03.164505+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ac16efc3-90bd-49b4-a871-6f31c1d3069f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3mofscjsx7o2m", "content": "- LiteSpeed advisory CVE-2026-54420: blog.litespeedtech.com/2026/06/01/s...\n- FIRST EPSS CVE-2026-54420: api.first.org/data/v1/epss...", "creation_timestamp": "2026-06-16T12:27:39.448080Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ac16efc3-90bd-49b4-a871-6f31c1d3069f/export"/>
    <published>2026-06-16T12:27:39.448080+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4b274e8b-38ba-4332-bc6c-388094c98cea/export</id>
    <title>4b274e8b-38ba-4332-bc6c-388094c98cea</title>
    <updated>2026-06-17T07:58:03.164418+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4b274e8b-38ba-4332-bc6c-388094c98cea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mog5epzerg42", "content": "LiteSpeed cPanel CVE-2026-54420 Escalates to Root on Shared Hosts CISA added LiteSpeed cPanel CVE-2026-54420 to its KEV catalog with a 48-hour deadline as exploitation of the unauthenticated REST A...\n\n#Resources #Application #Security #CVE [\u2026] \n\n[Original post on dailysecurityreview.com]", "creation_timestamp": "2026-06-16T15:45:46.083662Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4b274e8b-38ba-4332-bc6c-388094c98cea/export"/>
    <published>2026-06-16T15:45:46.083662+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9fff630a-03a6-45ba-96e5-d4e0e70a6068/export</id>
    <title>9fff630a-03a6-45ba-96e5-d4e0e70a6068</title>
    <updated>2026-06-17T07:58:03.164331+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9fff630a-03a6-45ba-96e5-d4e0e70a6068", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3moggylk4qh2f", "content": "\ud83d\udce2 CISA KEV ALERT: A LiteSpeed cPanel plugin flaw, CVE-2026-54420, is being actively exploited for root privilege escalation on shared servers. Federal agencies must patch by June 18. Hosting providers, check your systems! #CVE #KEV #CISA #CyberSecurity\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-06-16T18:37:46.627747Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9fff630a-03a6-45ba-96e5-d4e0e70a6068/export"/>
    <published>2026-06-16T18:37:46.627747+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/47d99436-5688-4c9c-8feb-192724b3a0d5/export</id>
    <title>47d99436-5688-4c9c-8feb-192724b3a0d5</title>
    <updated>2026-06-17T07:58:03.164240+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "47d99436-5688-4c9c-8feb-192724b3a0d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/iberianm.bsky.social/post/3moglmdq6l626", "content": "CISA adds LiteSpeed cPanel Plugin CVE-2026-54420 (privilege escalation) to KEV. Action: patch by June 18, 2026 and verify affected systems are updated. #Cybersecurity #Vulnerability #ThreatIntel\n\nSource: https://thehackernews.com/2026/06/cisa-flags-litespeed-cpanel-plugin-flaw.html", "creation_timestamp": "2026-06-16T20:00:22.712483Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/47d99436-5688-4c9c-8feb-192724b3a0d5/export"/>
    <published>2026-06-16T20:00:22.712483+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9aafbcf9-aa60-4ae3-b021-b9e58e438c4f/export</id>
    <title>9aafbcf9-aa60-4ae3-b021-b9e58e438c4f</title>
    <updated>2026-06-17T07:58:03.164128+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9aafbcf9-aa60-4ae3-b021-b9e58e438c4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mohbhd6yr22h", "content": "CISA warns of another cPanel plugin flaw exploited in attacks\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has given U.S. government agencies three days to secure their servers against an actively exploited vulnerability (CVE-2026-54420) in the LiteSpeed cPane\u2026\n#hackernews #news", "creation_timestamp": "2026-06-17T02:31:16.765664Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9aafbcf9-aa60-4ae3-b021-b9e58e438c4f/export"/>
    <published>2026-06-17T02:31:16.765664+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/88daf337-a0a0-49eb-898a-6cfb973bc9a4/export</id>
    <title>88daf337-a0a0-49eb-898a-6cfb973bc9a4</title>
    <updated>2026-06-17T07:58:03.162642+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "88daf337-a0a0-49eb-898a-6cfb973bc9a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54420", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mohbhfp4ax2n", "content": "Top 3 CVE for last 7 days:\nCVE-2026-35273: 62 interactions\nCVE-2026-54420: 26 interactions\nCVE-2025-10263: 25 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-54420: 21 interactions\nCVE-2026-20262: 8 interactions\nCVE-2026-48558: 8 interactions\n", "creation_timestamp": "2026-06-17T02:31:19.321996Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/88daf337-a0a0-49eb-898a-6cfb973bc9a4/export"/>
    <published>2026-06-17T02:31:19.321996+00:00</published>
  </entry>
</feed>
