sign in--:--:--UTC

CVE-2026-54420

exploited in the wild☆ pin

CVSS

8.5

Reports

3

First seen

Jun 15, 2026

Last seen

Jun 16, 2026

Affected product

LiteSpeed cPanel Plugin before 2.4.8; LiteSpeed WHM Plugin before 5.3.2.0

Recent reports

CISA warns of actively exploited LiteSpeed cPanel plugin privilege escalation flaw

Bleeping ComputerJun 16, 2026 High

CISA Adds LiteSpeed cPanel Plugin Privilege Escalation Flaw to KEV Catalog

The Hacker NewsJun 16, 2026 High

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA AdvisoriesJun 15, 2026

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans