LiteSpeed cPanel Plugin (CVE-2026-54420): Symlink Flaw Gives Shared-Hosting Tenants Root
CVE-2026-54420 (CVSS 8.5) is a symlink-following flaw in the LiteSpeed cPanel plugin (< 2.4.8) that lets any tenant with FTP or web shell access escape CageFS…
KNOWLEDGE BASE
ALL ARTICLES
Technical writing on Claude AI MCP connectors, PHP development, WooCommerce, storage billing systems, reverse engineering, and cybersecurity. 164 articles and counting.
UpdraftPlus Auth Bypass (CVE-2026-10795): Forged RPC Commands Run as Admin on 3 Million WordPress Sites
CVE-2026-10795 (CVSS 8.1) is a signature-verification bypass in UpdraftPlus UpdraftCentral (1.26.4 and earlier, 3M+ installs). Forged RPC commands execute as…
Squidbleed (CVE-2026-47729): 29-Year-Old Squid Bug Leaks Other Users' HTTP Requests
Squidbleed (CVE-2026-47729) is a Heartbleed-style heap over-read in Squid Proxy's FTP parser. An authorized proxy user can leak fragments of other users'…
pedit COW (CVE-2026-46331): Linux Traffic-Control Bug Poisons /bin/su for Root
pedit COW (CVE-2026-46331) is a Linux LPE in the kernel's act_pedit traffic-control action. A partial copy-on-write in tcf_pedit_act() corrupts the shared page…
DirtyClone (CVE-2026-43503): Dropped Packet-Clone Flag Gives Local Users Root
DirtyClone (CVE-2026-43503) is a CVSS 8.8 Linux kernel LPE. __pskb_copy_fclone() drops the SKBFL_SHARED_FRAG flag during packet cloning, letting an attacker…
Google June 2026 Spam Update: What Changed and What You Should Do Right Now
Google's June 2026 spam update finished rolling out on June 26 after two days — the second spam update of 2026. If your traffic dropped since June 24, this is…
cPanel & WHM Authentication Bypass (CVE-2026-41940): 44,000+ Servers Compromised
CVE-2026-41940 is a CVSS 9.8 authentication bypass in cPanel & WHM exploited as a zero-day for 65 days before patching. 44,000+ IPs confirmed compromised,…
PHP SOAP Extension Use-After-Free RCE (CVE-2026-6722)
A critical use-after-free in PHP's SOAP extension (CVE-2026-6722) allows unauthenticated RCE via crafted apache:Map SOAP requests. Affects PHP 8.1–8.3. Patch…
ShapedPlugin Supply Chain Attack (CVE-2026-49777): 400,000+ WordPress Sites Backdoored
Attackers breached ShapedPlugin's distribution pipeline and injected credential-stealing backdoor code into three Pro plugin updates (May 21–June 10, 2026).…
Everest Forms Pro (CVE-2026-3300): Unauthenticated PHP Code Injection Actively Exploited
CVE-2026-3300 in Everest Forms Pro (≤1.9.12) lets any unauthenticated visitor execute arbitrary PHP via the Complex Calculation eval() feature. 29,300+ attacks…
Google Killed FAQ Rich Results: What Happened and Why Your FAQ Schema Still Matters
Google stopped showing FAQ rich results on May 7, 2026, and is removing the Search Console report, Rich Results Test support, and API access through August.…
Google's First Official AI Search Optimization Guide: What It Means for Your Rankings
Google published its first official guide to optimizing for generative AI features in Search — and the message is that AI search is still just SEO. It also…