VulnSocial

CVE-2026-18754Disclosure

LOWCVSS 9.1 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

The product firmware contains an embedded, static RSA private key utilized by the Lighttpd web server for TLS termination. Exposure of this private key allows malicious actors to breach the confidentiality and integrity of HTTPS communications, enabling traffic decryption and server spoofing.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-321

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 4 signals
  • Disclosure: 4 classified signals
  • Peaked 1d ago at 3 mentions (2026-08-04); latest day: 1
  • 4 total mentions across 2 days

Deep dive

Activity timeline4 mentions / 2d
01223Mentions · 2026-08-04: 3Mentions · 2026-08-05: 1Patch / Workaround · 2026-08-05: 1Technical Details · 2026-08-04: 3Technical Details · 2026-08-05: 108-0408-05
Signal classification1 categories
Disclosure
4100.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-08-043
Disclosure3
2026-08-051
Disclosure1
Full discourse4 posts
  • Sami Laiho@samilaiho
    Disclosure

    Vulnerability in GeoVision GV-AS1620 Controller Firmware (GV-ASManager), GV-AS1620 Controller Firmware (GV-Cloud) and GV-ASManager URL: https://nvd.nist.gov/vuln/detail/CVE-2026-18754 Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.1

    Post summary

    The text discloses a critical vulnerability in GeoVision GV‑AS1620 firmware, provides an official fix, and includes basic severity details, but offers no evidence of exploitation or PoC.

    00000954
    30.6K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-18754 Embedded Static RSA Private Key Exposure in Product Firmware Lighttpd Web Server https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-18754

    Post summary

    The brief entry announces CVE-2026-18754 as an RSA private key exposure in Lighttpd firmware, but offers no additional evidence, exploit code, or mitigation.

    0000081
    4.1K followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-18754 The product firmware contains an embedded, static RSA private key utilized by the Lighttpd web server for TLS termination. Exposure of this private key allows malicio… https://www.cve.org/CVERecord?id=CVE-2026-18754 ----- Traducción: CVE-2026-18754 El … http://infoflow.cloud`

    Post summary

    The post reveals CVE‑2026‑18754 as a firmware flaw exposing a static RSA private key in Lighttpd, providing technical details but no evidence of exploitation, PoC, or patch.

    0000043
    96 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-18754 The product firmware contains an embedded, static RSA private key utilized by the Lighttpd web server for TLS termination. Exposure of this private key allows malicio… https://www.cve.org/CVERecord?id=CVE-2026-18754

    Post summary

    CVE-2026-18754 discloses that a static RSA private key embedded in Lighttpd firmware is exposed, potentially undermining TLS security.

    000001.5K
    57.9K followersView on X

Explore more

Back to dashboard