litespeedtech

Records47All Threatist records

Exploited (KEV)2In CISA KEV

CVSS critical8CVSS 9.0–10.0

CVSS high18CVSS 7.0–8.9

Exploited now

litespeedtech records in CISA KEV

TI-2026-39296 LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability CRITICAL 96KEV 2026-06-15 TI-2026-35606 LiteSpeed cPanel Plugin Privilege Escalation Vulnerability CRITICAL 100KEV 2026-05-26

Components

Products in the NVD configurations · select one to filter the records

Litespeed Cache 15 records CRITICAL Openlitespeed 12 records HIGH Litespeed Web Server 5 records MEDIUM Lsquic 3 records MEDIUM Litespeed Cpanel Plugin 2 records CRITICAL Litespeed Whm Plugin 2 records CRITICAL Litespeed Web Adc 1 record LOW

Records

2 records in Litespeed Whm Plugin · all components

TI-2026-35606 CVE-2026-48172 · GHSA-fxrh-cwjh-m33v

LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to…

CRITICAL 100KEV

LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild in May 2026.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.17915 Published 2026-05-21 Fixed in 2.4.7, 5.3.1.0 CWE-266

TI-2026-39296 CVE-2026-54420 · GHSA-3g44-c4qc-cxm8

LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before…

CRITICAL 96KEV

LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provided by a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS, as ex…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.01439 Published 2026-06-14 Fixed in 2.4.8 CWE-61

Open these records in search →

Critical	8
High	18
Medium	21
Low	0
No CVSS	0