{"uuid": "ee043fda-17b8-48f5-804f-d945a27b5b21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2026-33626", "type": "exploited", "source": "https://t.me/thehackernews/8866", "content": "\u26a0\ufe0f LMDeploy flaw exploited within 12.5 hours of disclosure.\n\nThe SSRF bug let attackers hit AWS metadata, Redis, and internal services via the image loader to scan networks and access data.\n\nWordPress plugin bugs are also being used for full site takeovers.\n\n\ud83d\udd17 Read \u2192 https://thehackernews.com/2026/04/lmdeploy-cve-2026-33626-flaw-exploited.html", "creation_timestamp": "2026-04-24T07:30:27.000000Z"}