Vulnerabilidades de LiteSpeed Technologies cPanel Plugin (CVE)

Registros CVE publicados para LiteSpeed Technologies cPanel Plugin, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

2 resultados

8.5Alta

CVE-2026-54420 KEV hace 4 meses

LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability

LiteSpeed Technologies cPanel Plugin

LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provided by a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS, as exploited in the wild in May 2026.

1.4%EPSS

10.0Crítica

CVE-2026-48172 KEV hace 5 meses

LiteSpeed cPanel Plugin Privilege Escalation Vulnerability

LiteSpeed Technologies cPanel Plugin; LiteSpeed Technologies WHM Plugin

LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild in May 2026. Detection is best done via a command line of grep -rE "cpanel_jsonapi_func=redisAble" /var/cpanel/logs /usr/local/cpanel/logs/ …

18%EPSS