sign in--:--:--UTC

CVE-2026-54420

exploited in the wild☆ pin

CVSS

8.5

Reports

5

First seen

Jun 15, 2026

Last seen

Sep 15, 2026

Affected product

LiteSpeed cPanel Plugin before 2.4.8; LiteSpeed WHM Plugin before 5.3.2.0

Recent reports

LiteSpeed Enterprise Privilege Escalation Flaw Allows Root Access on Shared Hosting

The Hacker NewsSep 15, 2026 Critical

Critical cPanel Flaw Allows Authenticated Users to Gain Root Control of Hosting Server

The Hacker NewsAug 28, 2026 High

CISA warns of actively exploited LiteSpeed cPanel plugin privilege escalation flaw

Bleeping ComputerJun 16, 2026 High

CISA Adds LiteSpeed cPanel Plugin Privilege Escalation Flaw to KEV Catalog

The Hacker NewsJun 16, 2026 High

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA AdvisoriesJun 15, 2026

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans