---
title: "LiteSpeed: known exploited vulnerabilities"
url: https://erroneo.us/security/vendor/litespeed/
description: "Every LiteSpeed vulnerability in CISA's Known Exploited Vulnerabilities catalog since October 2023 (2), newest first, with due dates and fixes."
type: vendor
section: "Security Digest"
date_modified: 2026-06-15
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# LiteSpeed: known exploited vulnerabilities

- 2026-06-15 [CVE-2026-54420](https://erroneo.us/security/cve/CVE-2026-54420/index.md) LiteSpeed cPanel Plugin: LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability (due 2026-06-18; ransomware: Unknown)
- 2026-05-26 [CVE-2026-48172](https://erroneo.us/security/cve/CVE-2026-48172/index.md) LiteSpeed cPanel Plugin: LiteSpeed cPanel Plugin Privilege Escalation Vulnerability (due 2026-05-29; ransomware: Unknown)

---
Source page: https://erroneo.us/security/vendor/litespeed/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt