Veille CVE

Lundi 15 juin 2026

2 CVE

  1. CVE-2026-54420 – Non évaluée Exploitée

    LiteSpeed cPanel Plugin

    LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability — LiteSpeed cPanel plugin contains a UNIX symbolic link (Symlink) following vulnerability that could allow a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS.

  2. CVE-2026-20262 – Non évaluée Exploitée

    Cisco Catalyst SD-WAN Manager

    Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability — Cisco Catalyst SD-WAN Manager contains a directory or path traversal vulnerability that could allow an authenticated, remote attacker to create a file or overwrite any file on the filesystem of an affected system.