{"schema_version":1,"title":"Newly exploited vulnerabilities: week of 15 to 21 June 2026 (week 25)","summary":"In the week of 15 to 21 June 2026, 4 vulnerabilities were newly recorded as exploited in the wild, 4 of them critical. The technology hit most was Cisco Catalyst SD-WAN Manager (1), followed by Joomla! Project Jce-Editor (1) and LiteSpeed Technologies cPanel Plugin (1).","url":"https://junglewise.ai/threats/exploited/2026-06-15","json_url":"https://junglewise.ai/threats/exploited/2026-06-15.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/exploited/2026-06-15","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","method":"A vulnerability is exploited in the wild when the CISA Known Exploited Vulnerabilities catalogue lists it or a vendor advisory says so; exploited_since is CISA's date added where it came from the catalogue, else the day Junglewise learned of it.","kind":"exploited_week","total":4,"period":{"end":"2026-06-21","start":"2026-06-15"},"critical":4,"generated_at":"2026-10-02T19:24:09.297469+00:00","technologies":[{"hub":true,"name":"Cisco Catalyst SD-WAN Manager","slug":"catalyst-sd-wan-manager","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/catalyst-sd-wan-manager"},{"hub":false,"name":"Joomla! Project Jce-Editor","slug":"jce-editor","vulnerabilities":1},{"hub":false,"name":"LiteSpeed Technologies cPanel Plugin","slug":"cpanel-plugin","vulnerabilities":1},{"hub":false,"name":"LiteSpeed Technologies WHM Plugin","slug":"whm-plugin","vulnerabilities":1},{"hub":true,"name":"Splunk Cloud Platform","slug":"cloud-platform","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/cloud-platform"},{"hub":true,"name":"Splunk Enterprise","slug":"splunk-enterprise","vulnerabilities":1,"url":"https://junglewise.ai/threats/technologies/splunk-enterprise"},{"hub":false,"name":"Widget Factory Joomla Content Editor","slug":"joomla-content-editor","vulnerabilities":1}],"vulnerabilities":[{"cve":"CVE-2026-20253","cvss":9.8,"epss":0.0173,"slug":"cve-2026-20253-splunk-enterprise-auth-bypass-in-postgresql-sidecar-service","title":"Splunk Enterprise auth bypass in PostgreSQL sidecar service","severity":"critical","exploited":true,"published_at":"2026-06-10T18:16:40.76+00:00","technologies":[{"hub":true,"name":"Splunk Cloud Platform","slug":"cloud-platform","vendor":{"name":"Splunk","slug":"splunk"}},{"hub":true,"name":"Splunk Enterprise","slug":"splunk-enterprise","vendor":{"name":"Splunk","slug":"splunk"}}],"exploited_since":"2026-06-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-20253-splunk-enterprise-auth-bypass-in-postgresql-sidecar-service"},{"cve":"CVE-2026-48907","cvss":10,"epss":0.0084,"slug":"cve-2026-48907-joomla-jce-editor-improper-access-control-leading-to-rce","title":"Joomla JCE Editor improper access control leading to RCE","severity":"critical","exploited":true,"published_at":"2026-06-05T08:16:30.797+00:00","technologies":[{"hub":false,"name":"Joomla! Project Jce-Editor","slug":"jce-editor","vendor":{"name":"Joomla! Project","slug":"joomla-project"}},{"hub":false,"name":"Widget Factory Joomla Content Editor","slug":"joomla-content-editor","vendor":{"name":"Widget Factory","slug":"widget-factory"}}],"exploited_since":"2026-06-16T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-48907-joomla-jce-editor-improper-access-control-leading-to-rce"},{"cve":"CVE-2026-20262","cvss":6.5,"slug":"cve-2026-20262-cisco-catalyst-sd-wan-manager-arbitrary-file-write-in-web-ui","title":"Cisco Catalyst SD-WAN Manager arbitrary file write in web UI","severity":"critical","exploited":true,"published_at":"2026-06-15T18:16:34.82+00:00","technologies":[{"hub":true,"name":"Cisco Catalyst SD-WAN Manager","slug":"catalyst-sd-wan-manager","vendor":{"name":"Cisco","slug":"cisco"}}],"exploited_since":"2026-06-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-20262-cisco-catalyst-sd-wan-manager-arbitrary-file-write-in-web-ui"},{"cve":"CVE-2026-54420","cvss":8.5,"epss":0.0035,"slug":"cve-2026-54420-litespeed-cpanel-plugin-privilege-escalation-via-symlink","title":"LiteSpeed cPanel plugin privilege escalation via symlink following","severity":"critical","exploited":true,"published_at":"2026-06-14T04:16:28.63+00:00","technologies":[{"hub":false,"name":"LiteSpeed Technologies cPanel Plugin","slug":"cpanel-plugin","vendor":{"name":"LiteSpeed Technologies","slug":"litespeed-technologies"}},{"hub":false,"name":"LiteSpeed Technologies WHM Plugin","slug":"whm-plugin","vendor":{"name":"LiteSpeed Technologies","slug":"litespeed-technologies"}}],"exploited_since":"2026-06-15T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-54420-litespeed-cpanel-plugin-privilege-escalation-via-symlink"}],"previous":{"key":"2026-06-08","top":"Arista EOS","total":7,"period":{"end":"2026-06-14","start":"2026-06-08"},"critical":7,"url":"https://junglewise.ai/threats/exploited/2026-06-08"},"next":{"key":"2026-06-22","top":"Ubiquiti Enterprise Fortress Gateway","total":6,"period":{"end":"2026-06-28","start":"2026-06-22"},"critical":6,"url":"https://junglewise.ai/threats/exploited/2026-06-22"}}