LiteSpeed Technologies cPanel Plugin güvenlik açıkları (CVE)

LiteSpeed Technologies cPanel Plugin için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

2 sonuç

8.5Yüksek

CVE-2026-54420 KEV 4 ay önce

LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability

LiteSpeed Technologies cPanel Plugin

LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provided by a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS, as exploited in the wild in May 2026.

1.4%EPSS

10.0Kritik

CVE-2026-48172 KEV 5 ay önce

LiteSpeed cPanel Plugin Privilege Escalation Vulnerability

LiteSpeed Technologies cPanel Plugin; LiteSpeed Technologies WHM Plugin

LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild in May 2026. Detection is best done via a command line of grep -rE "cpanel_jsonapi_func=redisAble" /var/cpanel/logs /usr/local/cpanel/logs/ …

18%EPSS