[ Vendor · 2 CVEs ]
LiteSpeed
CVEs affecting LiteSpeed published in the last 30 days, plus any LiteSpeed CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-54420 | 14 Jun 2026 | CVSS 8.5 | LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) FollowingLiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provided by a user with FTP or web… | Exploited |
| CVE-2026-48172 | 21 May 2026 | CVSS 9.8 | LiteSpeed cPanel Plugin Privilege EscalationLiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild in May 2026. Detection is best… | Exploited |