PT-2026-49104 · Cpanel+1 · Litespeed Cpanel Plugin+1

Published 2026-06-14 · Updated 2026-06-14 · CVE-2026-54420

Positive Technologies (AI Summary)

CVSS v3.1

8.5

High

Base vector

AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LiteSpeed cPanel plugin versions prior to 2.4.8 LiteSpeed WHM PlugIn versions prior to 5.3.2.0

Description The software mishandles symlinks provided by a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS. This issue was exploited in the wild in May 2026.

Recommendations Update LiteSpeed cPanel plugin to version 2.4.8 or later. Update LiteSpeed WHM PlugIn to version 5.3.2.0 or later.

Fix

Weakness Enumeration

CWE-61

Related Identifiers

CVE-2026-54420

Affected Products

Litespeed Whm Plugin

Litespeed Cpanel Plugin

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-54420 · Security Note
• https://twitter.com/VulmonFeeds/status/2066021621626732780 · Twitter Post
• https://blog.litespeedtech.com/2026/06/01/security-update-for-litespeed-cpanel-plugin-2 · Note
• https://litespeedtech.com/products/litespeed-web-server/control-panel-support/cpanel · Note