Security Digest
LiteSpeed: known exploited vulnerabilities
2 LiteSpeed CVEs CISA has confirmed as exploited in the wild since October 2023. If you run these products, check each one.
| Added | CVE | Product and flaw | CISA due |
|---|---|---|---|
| 2026-06-15 | CVE-2026-54420 | LiteSpeed cPanel Plugin LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability | 2026-06-18 |
| 2026-05-26 | CVE-2026-48172 | LiteSpeed cPanel Plugin LiteSpeed cPanel Plugin Privilege Escalation Vulnerability | 2026-05-29 |