Vulnerability intelligence

CVE-2026-54420

Official description is being retrieved from NVD — refresh shortly.

CVSS Score

8.5

High

EPSS — Exploit Probability

0.0%

Riskier than 0% of all CVEs

Exploitation

Confirmed in the wild

KEV since 2026-06-15

Remediation

Patch available

Federal deadline 2026-06-18

NVD entry Vendor patch PoC / advisory CISA KEV

2 articles across 2 outlets · first covered Jun 15, 2026 · latest Jun 15, 2026

Tracked incidents

vulnerability open 2 articles

LiteSpeed cPanel Plugin UNIX symlink vulnerability (CVE-2026-54420) exploited

Coverage timeline

CISA flags LiteSpeed cPanel Plugin UNIX symlink vulnerability
www.cisa.gov · Jun 15, 2026
CISA Adds CVE-2026-54420 to Known Exploited Vulnerabilities Catalogue
cisa.gov · Jun 15, 2026