Vulnerabilities

TI-2026-39296 CVE-2026-54420 · GHSA-3g44-c4qc-cxm8

LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before…

CRITICAL 96KEV

LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provided by a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS, as ex…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.01439 Published 2026-06-14 Fixed in 2.4.8 CWE-61

TI-2026-35606 CVE-2026-48172 · GHSA-fxrh-cwjh-m33v

LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to…

CRITICAL 100KEV

LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild in May 2026.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.17915 Published 2026-05-21 Fixed in 2.4.7, 5.3.1.0 CWE-266

Vulnerabilities

Filters

LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before…

LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to…