LiteSpeed cPanel Plugin (CVE-2026-54420): Symlink Flaw Gives Shared-Hosting Tenants Root
CVE-2026-54420 (CVSS 8.5) is a symlink-following flaw in the LiteSpeed cPanel plugin (< 2.4.8) that lets any tenant with FTP or web shell access escape CageFS…
CATEGORY
CYBERSECURITY
Security research, penetration testing, CVE analysis, PCI-DSS compliance, and defensive programming techniques for web applications.
79 ARTICLES
UpdraftPlus Auth Bypass (CVE-2026-10795): Forged RPC Commands Run as Admin on 3 Million WordPress Sites
CVE-2026-10795 (CVSS 8.1) is a signature-verification bypass in UpdraftPlus UpdraftCentral (1.26.4 and earlier, 3M+ installs). Forged RPC commands execute as…
Squidbleed (CVE-2026-47729): 29-Year-Old Squid Bug Leaks Other Users' HTTP Requests
Squidbleed (CVE-2026-47729) is a Heartbleed-style heap over-read in Squid Proxy's FTP parser. An authorized proxy user can leak fragments of other users'…
pedit COW (CVE-2026-46331): Linux Traffic-Control Bug Poisons /bin/su for Root
pedit COW (CVE-2026-46331) is a Linux LPE in the kernel's act_pedit traffic-control action. A partial copy-on-write in tcf_pedit_act() corrupts the shared page…
DirtyClone (CVE-2026-43503): Dropped Packet-Clone Flag Gives Local Users Root
DirtyClone (CVE-2026-43503) is a CVSS 8.8 Linux kernel LPE. __pskb_copy_fclone() drops the SKBFL_SHARED_FRAG flag during packet cloning, letting an attacker…
cPanel & WHM Authentication Bypass (CVE-2026-41940): 44,000+ Servers Compromised
CVE-2026-41940 is a CVSS 9.8 authentication bypass in cPanel & WHM exploited as a zero-day for 65 days before patching. 44,000+ IPs confirmed compromised,…
PHP SOAP Extension Use-After-Free RCE (CVE-2026-6722)
A critical use-after-free in PHP's SOAP extension (CVE-2026-6722) allows unauthenticated RCE via crafted apache:Map SOAP requests. Affects PHP 8.1–8.3. Patch…
ShapedPlugin Supply Chain Attack (CVE-2026-49777): 400,000+ WordPress Sites Backdoored
Attackers breached ShapedPlugin's distribution pipeline and injected credential-stealing backdoor code into three Pro plugin updates (May 21–June 10, 2026).…
Everest Forms Pro (CVE-2026-3300): Unauthenticated PHP Code Injection Actively Exploited
CVE-2026-3300 in Everest Forms Pro (≤1.9.12) lets any unauthenticated visitor execute arbitrary PHP via the Complex Calculation eval() feature. 29,300+ attacks…
HTTP/2 Bomb: Remote DoS on NGINX, Apache, IIS & Envoy (CVE-2026-49975)
A single attacker on a home connection can exhaust 32 GB of server RAM in under 20 seconds by chaining HPACK compression amplification with HTTP/2 flow-control…
Gravity SMTP WordPress Plugin: 17M Attacks, API Keys Leaking (CVE-2026-4020)
The Gravity SMTP WordPress plugin (≤2.1.4) has been hit with 17 million+ attack attempts — including 4 million in a single day. An unauthenticated info…
CVE-2026-4020: Gravity SMTP Plugin Exposes API Keys
A vulnerability in the Gravity SMTP WordPress plugin is being mass-exploited, with Wordfence blocking over 17 million attempts since May 2026. The flaw lets…