← All Advisories

CVE-2026-54420: LiteSpeed cPanel Plugin UNIX

Status: KEV  |  Advisory ID: CVE-2026-54420

Key Details

CVECVE-2026-54420
Affected productsLiteSpeed cPanel Plugin
Exploitation statusListed in CISA's Known Exploited Vulnerabilities (KEV) catalog, indicating confirmed active exploitation.
Classified asCWE-61 (UNIX Symbolic Link (Symlink) Following)
KEV listingAdded to CISA's Known Exploited Vulnerabilities (KEV) catalog on 2026-06-15.
Federal remediation deadline2026-06-18 (CISA KEV, Binding Operational Directive).

What to Know

LiteSpeed cPanel plugin contains a UNIX symbolic link (Symlink) following vulnerability that could allow a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-54420