Skip to content

CyberSIXT Search

Vendor

LiteSpeed

CVEs tracked · all time: 2
in CISA KEV · all time: 2
article · since 11 Sep: 1
articles · all time: 14

One article in the last 45 daysThe latest: Security Affairs, Tue 15 Sep, 13:13 UTC.See the full timeline

Products: cPanel Plugin, WHM Plugin

CVEs

2 CVEs

CVE-2026-48172LiteSpeed cPanel Plugin Privilege Escalation VulnerabilityCVSS10.0CriticalExploited1.0%EPSS7articles

CVE-2026-54420LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following VulnerabilityCVSS8.5HighExploited0.8%EPSS8articles

Coverage

14 articles, all timeFull timeline RSS feed

15 SepLiteSpeed Server Flaw Lets Tenants Escape Shared Hosting AccountsSecurity Affairs
17 JunJoomla and LiteSpeed Bugs Let Attackers Run Code, Gain RootSecurityWeek
16 JunCould Apple Build Its Own OpenClaw Competitor?SecurityOnline
16 JunCISA Flags Cisco SD WAN and LiteSpeed Plugins Under Active AttackSecurity Affairs
16 JunInside the Stealthy Agent Tesla Infection ChainSecurityOnline
16 JunLiteSpeed flaw lets users gain root, Cisco SD WAN also exposedSecurityOnline
15 JunCISA flags LiteSpeed cPanel Plugin UNIX symlink vulnerabilityCISA · official notice
15 JunCISA Adds CVE-2026-54420 to Known Exploited Vulnerabilities CatalogueCISA · official notice
28 MayCISA adds LiteSpeed cPanel flaw CVE-2026-48172 to KEV catalogSecurity Affairs
27 MaySerpens Hackers Exploit CVE-2026-48172, Roll Out New RAT VariantsSecurityOnline
27 MayCISA urges patch of CVE-2026-48172 in cPanel LiteSpeed pluginSecurityWeek
26 MayCISA flags LiteSpeed cPanel Plugin bug CVE-2026-48172 in KEVCISA · official notice
26 MayCISA Adds Critical LiteSpeed cPanel Plugin Flaw to KEV CatalogueCISA · official notice
23 MayLiteSpeed cPanel Plugin Flaw Lets Attackers Gain Root via CVE-2026-48172The Hacker News · first in our coverage