https://vulnerability.circl.lu/sightings/feed 2026-08-06T14:41:05.910393+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/dd3a10e3-bfb5-48ae-9383-d6094324a375/export 2026-08-06T14:41:05.928456+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "dd3a10e3-bfb5-48ae-9383-d6094324a375", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58048", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96871", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-58048-PoC-Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a tc4dy\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-06 09:45:12\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\ud83d\udc7e CVE-2026-58048 \u2013 cPanel Root SQL Execution Toolkit (CVSS 9.4) | Full Red/Blue Team Toolkit suite for unpatched cPanel & WHM 11.x. 3 tools: Safe Checker (audit/reporting), PoC (verification), Weaponized (reverse shell, persistence, UDF RCE, deployment, file read/write, database operations, mass scan). w/Python. \ud83e\uddbe Use Ethically, Stay Legal <3\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-06T11:00:12.450007Z"} 2026-08-06T11:00:12.450007+00:00 https://vulnerability.circl.lu/sighting/53e2978b-850f-4d86-8229-85be36e384e8/export 2026-08-06T14:41:05.931943+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "53e2978b-850f-4d86-8229-85be36e384e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58048", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3msfaf427pp2s", "content": "Top 3 CVE for last 7 days:\nCVE-2026-18577: 37 interactions\nCVE-2026-66066: 36 interactions\nCVE-2026-58048: 16 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-18577: 5 interactions\nCVE-2026-54876: 4 interactions\nCVE-2026-12943: 3 interactions\n", "creation_timestamp": "2026-08-06T04:47:35.280790Z"} 2026-08-06T04:47:35.280790+00:00 https://vulnerability.circl.lu/sighting/78d910fb-27a7-4466-ac68-c083ed82f8a9/export 2026-08-06T14:41:05.932068+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "78d910fb-27a7-4466-ac68-c083ed82f8a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58048", "type": "seen", "source": "https://t.me/cyberbannews_ir/22935", "content": "\ud83d\udd34 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u062f\u0631 cPanel\n\n\ud83d\udd3b \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2026-58048 \u062f\u0631 cPanel & WHM \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0647 \u06a9\u0647 \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062f\u0627\u0631\u0627\u06cc \u062d\u0633\u0627\u0628 cPanel \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u062f\u0633\u062a\u0648\u0631\u0627\u062a SQL \u0631\u0627 \u0628\u0627 \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc Root \u067e\u0627\u06cc\u06af\u0627\u0647\u200c\u062f\u0627\u062f\u0647 \u0627\u062c\u0631\u0627 \u06a9\u0646\u0646\u062f.\n\n\ud83d\udd3b \u0627\u06cc\u0646 \u0646\u0642\u0635 \u062f\u0631 \u0628\u0631\u062e\u06cc \u0634\u0631\u0627\u06cc\u0637 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0627\u0645\u06a9\u0627\u0646 \u062f\u0647\u062f \u0627\u0632 \u067e\u0627\u06cc\u06af\u0627\u0647\u200c\u062f\u0627\u062f\u0647 \u0641\u0631\u0627\u062a\u0631 \u0631\u0641\u062a\u0647 \u0648 \u0628\u0647 \u0633\u0637\u062d \u0633\u06cc\u0633\u062a\u0645\u200c\u0639\u0627\u0645\u0644 \u0646\u06cc\u0632 \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0646\u062f.\n\n\ud83d\udd39 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0627 \u0627\u0645\u062a\u06cc\u0627\u0632 9.4 \u0627\u0632 10 \u062f\u0631 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u062c\u062f\u06cc\u062f \u0628\u0631\u0637\u0631\u0641 \u0634\u062f\u0647 \u0648 \u0628\u0647 \u0645\u062f\u06cc\u0631\u0627\u0646 \u0633\u0631\u0648\u0631\u0647\u0627 \u062a\u0648\u0635\u06cc\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a \u0647\u0631\u0686\u0647 \u0633\u0631\u06cc\u0639\u200c\u062a\u0631 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u062e\u0648\u062f \u0631\u0627 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u0646\u062f.\n\n#\u0622\u0633\u06cc\u0628_\u067e\u0630\u06cc\u0631\u06cc #\u0647\u06a9 #\u062a\u0647\u062f\u06cc\u062f_\u0633\u0627\u06cc\u0628\u0631\u06cc\n\n\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\n\ud83d\udd39\ud83d\udd39 @cyberbannews_ir", "creation_timestamp": "2026-08-06T00:00:48.592246Z"} 2026-08-06T00:00:48.592246+00:00 https://vulnerability.circl.lu/sighting/5b2db8b3-c5ea-4ce5-9266-ce9c3955d6a7/export 2026-08-06T14:41:05.932170+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "5b2db8b3-c5ea-4ce5-9266-ce9c3955d6a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58048", "type": "seen", "source": "https://bsky.app/profile/modat-io.bsky.social/post/3msdifqdl7s2p", "content": "CVE-2026-58048 (CVSS 9.4): cPanel & WHM DB privilege-escalation flaw lets an authenticated MySQL user run SQL as database root, risking OS-level compromise. Affects all versions + WP Squared. Patch now. Query: technology=\"cPanel\" or web.title~\"WP Squared Login\" or web.headers~\"whostmgrrelogin\"", "creation_timestamp": "2026-08-05T12:05:52.223768Z"} 2026-08-05T12:05:52.223768+00:00 https://vulnerability.circl.lu/sighting/b0180eed-1950-45eb-a220-ced47c47332c/export 2026-08-06T14:41:05.932262+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b0180eed-1950-45eb-a220-ced47c47332c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58048", "type": "seen", "source": "https://t.me/cyberbannews_ir/22935", "content": "\ud83d\udd34 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u062f\u0631 cPanel\n\n\ud83d\udd3b \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2026-58048 \u062f\u0631 cPanel & WHM \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0647 \u06a9\u0647 \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062f\u0627\u0631\u0627\u06cc \u062d\u0633\u0627\u0628 cPanel \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u062f\u0633\u062a\u0648\u0631\u0627\u062a SQL \u0631\u0627 \u0628\u0627 \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc Root \u067e\u0627\u06cc\u06af\u0627\u0647\u200c\u062f\u0627\u062f\u0647 \u0627\u062c\u0631\u0627 \u06a9\u0646\u0646\u062f.\n\n\ud83d\udd3b \u0627\u06cc\u0646 \u0646\u0642\u0635 \u062f\u0631 \u0628\u0631\u062e\u06cc \u0634\u0631\u0627\u06cc\u0637 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0627\u0645\u06a9\u0627\u0646 \u062f\u0647\u062f \u0627\u0632 \u067e\u0627\u06cc\u06af\u0627\u0647\u200c\u062f\u0627\u062f\u0647 \u0641\u0631\u0627\u062a\u0631 \u0631\u0641\u062a\u0647 \u0648 \u0628\u0647 \u0633\u0637\u062d \u0633\u06cc\u0633\u062a\u0645\u200c\u0639\u0627\u0645\u0644 \u0646\u06cc\u0632 \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0646\u062f.\n\n\ud83d\udd39 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0627 \u0627\u0645\u062a\u06cc\u0627\u0632 9.4 \u0627\u0632 10 \u062f\u0631 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u062c\u062f\u06cc\u062f \u0628\u0631\u0637\u0631\u0641 \u0634\u062f\u0647 \u0648 \u0628\u0647 \u0645\u062f\u06cc\u0631\u0627\u0646 \u0633\u0631\u0648\u0631\u0647\u0627 \u062a\u0648\u0635\u06cc\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a \u0647\u0631\u0686\u0647 \u0633\u0631\u06cc\u0639\u200c\u062a\u0631 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u062e\u0648\u062f \u0631\u0627 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u0646\u062f.\n\n#\u0622\u0633\u06cc\u0628_\u067e\u0630\u06cc\u0631\u06cc #\u0647\u06a9 #\u062a\u0647\u062f\u06cc\u062f_\u0633\u0627\u06cc\u0628\u0631\u06cc\n\n\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\n\ud83d\udd39\ud83d\udd39 @cyberbannews_ir", "creation_timestamp": "2026-08-05T09:00:05.599338Z"} 2026-08-05T09:00:05.599338+00:00 https://vulnerability.circl.lu/sighting/b72100fd-d2cc-4ff7-a2e9-7d6706de28bb/export 2026-08-06T14:41:05.932352+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b72100fd-d2cc-4ff7-a2e9-7d6706de28bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58048", "type": "seen", "source": "https://bsky.app/profile/stiffeo.bsky.social/post/3mscseynbld25", "content": "\ud83d\udea8 Critical CVE-2026-58048 in cPanel! Authenticated hosting clients can execute SQL in the database root context. \n\n\ud83d\udee0\ufe0f Action: Update cPanel immediately to patch this critical vulnerability.\n\n#InfoSec #CyberSecurity #CVE #cPanel", "creation_timestamp": "2026-08-05T05:31:39.670295Z"} 2026-08-05T05:31:39.670295+00:00 https://vulnerability.circl.lu/sighting/b3797a83-641d-48a5-9797-7c34d5746ad5/export 2026-08-06T14:41:05.932435+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b3797a83-641d-48a5-9797-7c34d5746ad5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58048", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mscqarv53s2a", "content": "CVE-2026-58048: cPanel Bug Enables Full Database Administrator Access\n\nA critical cPanel flaw (CVE-2026-58048) lets authenticated users execute SQL as root. Users should update to fixed versions immediately. If you run a shared hosting box, this one\u2019s worth reading before your mor\u2026\n#hackernews #news", "creation_timestamp": "2026-08-05T04:53:31.557523Z"} 2026-08-05T04:53:31.557523+00:00 https://vulnerability.circl.lu/sighting/9321f224-e42e-4809-8750-e3d3ee23332f/export 2026-08-06T14:41:05.932515+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "9321f224-e42e-4809-8750-e3d3ee23332f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58048", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mscpueke5k2o", "content": "Top 3 CVE for last 7 days:\nCVE-2026-66066: 42 interactions\nCVE-2026-18577: 32 interactions\nCVE-2026-58048: 15 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-58048: 15 interactions\nCVE-2026-18574: 8 interactions\nCVE-2026-15307: 6 interactions\n", "creation_timestamp": "2026-08-05T04:46:34.889119Z"} 2026-08-05T04:46:34.889119+00:00 https://vulnerability.circl.lu/sighting/0fe35081-37a8-430a-a7a9-5e615cb46ce3/export 2026-08-06T14:41:05.932598+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "0fe35081-37a8-430a-a7a9-5e615cb46ce3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58048", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mscjyj3jkx2c", "content": "CVE-2026-58048: cPanel\u306e\u30d0\u30b0\u306b\u3088\u308a\u3001\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u7ba1\u7406\u8005\u3078\u306e\u30d5\u30eb\u30a2\u30af\u30bb\u30b9\u304c\u53ef\u80fd\u306b\u306a\u308b \n\nCVE-2026-58048: cPanel Bug Enables Full Database Administrator Access #SecurityAffairs (Aug 4)\n\nsecurityaffairs.com/196595/secur...", "creation_timestamp": "2026-08-05T03:01:30.678338Z"} 2026-08-05T03:01:30.678338+00:00 https://vulnerability.circl.lu/sighting/7bf04a3a-e6ca-415b-b758-c1c6eba9a157/export 2026-08-06T14:41:05.932679+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "7bf04a3a-e6ca-415b-b758-c1c6eba9a157", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-58048", "type": "seen", "source": "https://thehackernews.com/2026/08/new-cpanel-critical-flaw-could-let.html", "content": "cPanel has patched a flaw that let an authenticated hosting customer execute SQL in the database's root context, crossing the privilege boundary between a cPanel account and the server's administrative database identity. It shipped in a targeted security release that closes two other routes past account boundaries.\n\nThe database bug is tracked as CVE-2026-58048 (CVSS 4.0 score: 9.4) and affects", "creation_timestamp": "2026-08-05T01:00:34.024500Z"} 2026-08-05T01:00:34.024500+00:00