# Newly exploited vulnerabilities: week of 15 to 21 June 2026 (week 25)

Source: https://junglewise.ai/threats/exploited/2026-06-15  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2 October 2026, 19:24 UTC. Final: it does not change.  
Data: https://junglewise.ai/threats/exploited/2026-06-15.json  
License: CC BY 4.0 with a link back

In the week of 15 to 21 June 2026, 4 vulnerabilities were newly recorded as exploited in the wild, 4 of them critical. The technology hit most was Cisco Catalyst SD-WAN Manager (1), followed by Joomla! Project Jce-Editor (1) and LiteSpeed Technologies cPanel Plugin (1).

## Newly exploited this week

- [CVE-2026-20253: Splunk Enterprise auth bypass in PostgreSQL sidecar service](https://junglewise.ai/threats/cve-2026-20253-splunk-enterprise-auth-bypass-in-postgresql-sidecar-service) (critical, exploited in the wild, CVSS 9.8, exploited since 18 Jun 2026, published 10 Jun 2026)
- [CVE-2026-48907: Joomla JCE Editor improper access control leading to RCE](https://junglewise.ai/threats/cve-2026-48907-joomla-jce-editor-improper-access-control-leading-to-rce) (critical, exploited in the wild, CVSS 10, exploited since 16 Jun 2026, published 5 Jun 2026)
- [CVE-2026-20262: Cisco Catalyst SD-WAN Manager arbitrary file write in web UI](https://junglewise.ai/threats/cve-2026-20262-cisco-catalyst-sd-wan-manager-arbitrary-file-write-in-web-ui) (critical, exploited in the wild, CVSS 6.5, exploited since 15 Jun 2026, published 15 Jun 2026)
- [CVE-2026-54420: LiteSpeed cPanel plugin privilege escalation via symlink following](https://junglewise.ai/threats/cve-2026-54420-litespeed-cpanel-plugin-privilege-escalation-via-symlink) (critical, exploited in the wild, CVSS 8.5, exploited since 15 Jun 2026, published 14 Jun 2026)

## Technologies hit most

1. [Cisco Catalyst SD-WAN Manager](https://junglewise.ai/threats/technologies/catalyst-sd-wan-manager): 1 vulnerability
2. Joomla! Project Jce-Editor: 1 vulnerability
3. LiteSpeed Technologies cPanel Plugin: 1 vulnerability
4. LiteSpeed Technologies WHM Plugin: 1 vulnerability
5. [Splunk Cloud Platform](https://junglewise.ai/threats/technologies/cloud-platform): 1 vulnerability
6. [Splunk Enterprise](https://junglewise.ai/threats/technologies/splunk-enterprise): 1 vulnerability
7. Widget Factory Joomla Content Editor: 1 vulnerability

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Newly exploited vulnerabilities: week of 15 to 21 June 2026 (week 25)", https://junglewise.ai/threats/exploited/2026-06-15, 2 October 2026.