Daily Threat Briefing
← All briefings

Craft CMS · Crawl4AI · libssh2 library

DAILY THREAT INTELLIGENCE BRIEFING Date: 2026-06-22 Prepared for: SOC Analysts | Incident Responders | Vulnerability Management | Security Leadership

EXECUTIVE SUMMARY

Today’s most significant new developments are a critical remote code execution vulnerability in Craft CMS affecting versions 5.5.0 through 5.9.13, multiple critical flaws in the libssh2 library affecting broad SSH-dependent infrastructure, and a new AryStinger botnet actively compromising D-Link routers at scale. Atlassian has patched approximately 100 vulnerabilities across Bamboo, Confluence, and related products. The CISA KEV deadline for CVE-2026-42271 (LiteLLM) falls today — confirm patch status immediately.

CRITICAL VULNERABILITIES

NEW

CVE-2026-56382 (Craft CMS)

  • Affected products: Craft CMS (craftcms/cms) versions 5.5.0 through 5.9.13
  • Severity: CVSS 8.6
  • EPSS: 0 (newly published; no exploitation data yet)
  • Technical detail: The FieldsController::actionRenderCardPreview() method passes field layout data supplied by an authenticated user directly into a rendering context without adequate sanitization, enabling remote code execution. Exploitation requires an authenticated session, but Craft CMS installations with self-registration enabled or with compromised low-privilege accounts are at elevated risk. The affected version range spans approximately eight months of releases, meaning a large proportion of production deployments are likely vulnerable.
  • Exploitation status: No confirmed in-the-wild exploitation. The authenticated RCE class and broad version range make this a high-priority patching target.
  • Remediation: Upgrade Craft CMS to version 5.9.14 or later. Disable self-registration if not required. Review user account lists for unauthorized accounts. Monitor application logs for unexpected rendering requests.

CVE-2026-56265 (Crawl4AI)

  • Affected products: Crawl4AI before version 0.8.7 (Docker API server deployments)
  • Severity: CVSS 9.3 (Critical)
  • EPSS: 0 (newly published)
  • Technical detail: The Docker API server in Crawl4AI ships with a hardcoded default JWT signing key. Any attacker who knows this key — which is publicly documented — can forge valid authentication tokens and gain full API access without credentials. Crawl4AI is increasingly deployed in AI-driven data pipeline and web scraping infrastructure. Instances exposed to the internet or shared networks without network-level access controls are fully compromised by any party aware of the default key.
  • Exploitation status: No confirmed in-the-wild exploitation, but the hardcoded key is publicly known, making exploitation trivial.
  • Remediation: Upgrade to Crawl4AI 0.8.7 or later. Immediately rotate the JWT signing key in any existing deployment. Restrict Docker API server exposure to trusted networks only. Audit access logs for unauthorized API calls.

libssh2 (Multiple CVEs)

  • Affected products: libssh2 library, all versions prior to patched releases (specific CVEs pending full disclosure per Heise reporting)
  • Severity: At least one flaw rated critical; full CVSS details pending
  • Technical detail: Heise Security reports multiple vulnerabilities in libssh2, including at least one critical flaw, affecting SSH connection handling. libssh2 is a widely embedded C library used in curl, PHP, Python bindings, and numerous enterprise applications for SSH and SFTP operations. A critical flaw in this library could affect any application or appliance that links against it for SSH connectivity. Patches are available but adoption is reported to be incomplete.
  • Exploitation status: No confirmed in-the-wild exploitation reported. Broad deployment surface warrants urgent attention.
  • Remediation: Update libssh2 to the latest patched version via OS package manager or vendor update. Identify all applications and appliances in the environment that bundle libssh2 and apply vendor-specific updates. Prioritize internet-facing systems performing SSH or SFTP operations.

CVE-2026-56397 / CVE-2026-56395 (SiYuan Note)

  • Affected products: SiYuan before version 3.6.1
  • Severity: CVSS 9.4 (Critical)
  • EPSS: 0 (newly published)
  • Technical detail: SiYuan fails to sanitize package metadata and README content in its Bazaar marketplace, allowing malicious package authors to inject arbitrary HTML and JavaScript. Exploitation requires a user to browse or install a malicious package from the marketplace, after which attacker-controlled script executes in the application context. SiYuan is a self-hosted personal knowledge management tool; organizations permitting its use on corporate endpoints should treat this as a supply chain risk via the marketplace.
  • Exploitation status: No confirmed in-the-wild exploitation.
  • Remediation: Update SiYuan to version 3.6.1 or later. Advise users to install only trusted, verified packages from the Bazaar marketplace. Consider restricting marketplace access in managed deployments.

ONGOING

  • CVE-2026-42271 (LiteLLM): CISA KEV deadline today (2026-06-22) — confirm upgrade to v1.83.7-stable is complete.
  • CVE-2026-48908 / CVE-2026-48939 / CVE-2026-48909 (Joomla extensions SP Page Builder, iCagenda, SP LMS): patch immediately; audit upload directories.
  • CVE-2026-5366 (Prefect): restrict API access; apply patch when available.
  • CVE-2026-4020 (Gravity SMTP WordPress): actively exploited; update plugin and rotate credentials.
  • CVE-2026-20262 (Cisco Catalyst SD-WAN Manager): actively exploited; CISA KEV deadline 2026-06-29; patch immediately.
  • CVE-2026-0257 (Palo Alto PAN-OS GlobalProtect): actively exploited; apply PAN-OS patches.
  • CVE-2026-5027 (Langflow): actively exploited; isolate from internet.
  • CVE-2026-50751 (Check Point Security Gateway): actively exploited; apply hotfix sk185033.
  • CVE-2026-41679 (Paperclip AI): Metasploit module available; restrict network access.
  • Gogs Authentication Bypass (TRA-2026-50): disable reverse proxy auth or enforce network-level controls.

EUROPEAN ADVISORIES

No new BSI WID or CERT-EU advisories were published in the last 24 hours.

Atlassian June 2026 Security Bulletin: Atlassian has patched approximately 100 vulnerabilities across Bamboo, Confluence, Jira, and related products, including flaws that could allow remote code execution. European organizations with on-premises Atlassian deployments should apply the June 2026 updates immediately. Heise Security has confirmed coverage of this bulletin.

libssh2 critical vulnerabilities: Heise Security reports that patches are available but not yet widely deployed. German and European organizations should treat this as an urgent patching item given libssh2’s prevalence in enterprise Linux environments and embedded appliances.

Cisco ISE critical vulnerability: Heise Security reports a critical flaw in Cisco Identity Services Engine requiring administrator privileges for exploitation but still rated critical due to post-authentication impact. Network administrators should apply available Cisco security updates promptly.

F5 NGINX out-of-band critical patches: F5 has released unscheduled patches for four NGINX vulnerabilities, two rated critical. Organizations running NGINX in production should apply these updates immediately. Covered in prior reporting; apply patches if not yet done.

PTC Windchill (WID-SEC-2026-1991): BSI previously contacted administrators directly regarding a critical flaw; patch status should be confirmed.

ACTIVE THREATS AND CAMPAIGNS

NEW — AryStinger Botnet (D-Link Routers) A previously undocumented botnet named AryStinger has compromised more than 4,000 D-Link routers globally, converting them into proxies for malicious traffic. The campaign targets outdated D-Link router firmware. Compromised devices are used to anonymize attacker traffic, complicating attribution and enabling downstream attacks. Organizations and managed service providers with D-Link routers in scope should audit firmware versions, check for unauthorized configuration changes, and consider replacing end-of-life devices that cannot receive firmware updates. No specific IOCs have been published at this time.

NEW — Amazon One Medical Data Extortion (ShinyHunters) ShinyHunters has claimed a breach of Amazon’s One Medical health service and is threatening to publish stolen data. While primarily a US-focused incident, European organizations with health data partnerships or integrations involving One Medical should assess exposure. Confidence in the claim is unverified at this time.

ONGOING — Sapphire Sleet (North Korea) Mastra AI npm supply chain: audit npm dependencies; treat affected systems as potentially compromised. ONGOING — Prinz Eugen Ransomware: no ransom note; verify immutable backups and monitor for mass file modification. ONGOING — FortiBleed: rotate credentials and enforce MFA on all Fortinet devices; CISA advisory active. ONGOING — Gentlemen RaaS / GentleKiller: EDR killer suite in active distribution; verify EDR tamper protection. ONGOING — Large-scale credential attacks on security vendor devices (Unit 42): enforce MFA on all perimeter device admin interfaces.

SECURITY NEWS AND CONTEXT

AutoJack AI agent exploit: Microsoft researchers have detailed an exploit chain that hijacks an AI browsing agent to achieve host-level code execution via a malicious web page, requiring no user credentials or interaction beyond the agent loading the page. Organizations deploying AI browsing agents should review their isolation and privilege models.

Klue OAuth breach: The Icarus extortion group has claimed the Klue breach, with the victim list expanding. Salesforce has disabled the Klue integration; affected organizations should audit OAuth token grants and revoke any Klue-related tokens pending resolution.

usbliter8 (Apple A12/A13 SecureROM): A published, unpatchable exploit achieves arbitrary code execution in the SecureROM of Apple A12 and A13 chips. Exploitation requires physical USB access; remote risk is low, but high-security environments should assess device inventory.

RECOMMENDED ACTIONS

  1. Confirm LiteLLM upgrade to v1.83.7-stable is complete — CISA KEV deadline is today (2026-06-22).
  2. Upgrade Craft CMS to version 5.9.14 or later (CVE-2026-56382); audit user accounts for unauthorized access.
  3. Upgrade Crawl4AI to 0.8.7 and rotate JWT signing keys in all existing deployments (CVE-2026-56265); restrict Docker API server to trusted networks.
  4. Update libssh2 across all Linux systems and appliances; prioritize internet-facing hosts performing SSH or SFTP operations.
  5. Apply Atlassian June 2026 Security Bulletin updates across all on-premises Bamboo, Confluence, and Jira instances.
  6. Audit D-Link router inventory for AryStinger compromise indicators; update firmware or replace end-of-life devices.
  7. Update SiYuan to version 3.6.1 or later on all managed endpoints (CVE-2026-56397/56395).
  8. Revoke and audit all Klue-related OAuth tokens in Salesforce environments; review OAuth grant lists for other third-party integrations.
  9. Apply Cisco ISE and F5 NGINX critical patches if not completed following prior advisories.
  10. Continue remediation of previously reported items: CVE-2026-20262 (Cisco SD-WAN, KEV deadline 2026-06-29), CVE-2026-48908/48909/48939 (Joomla extensions), CVE-2026-4020 (Gravity SMTP), CVE-2026-0257 (PAN-OS), CVE-2026-5027 (Langflow), CVE-2026-50751 (Check Point), Gogs auth bypass.