#cpanel

3 analyses tagged cpanel, sorted newest first.

high 3 sources
LiteSpeed cPanel Plugin CVE-2026-54420: KEV Symlink-Following Exposure in Shared Hosting
CISA added LiteSpeed cPanel Plugin CVE-2026-54420 to KEV on 2026-06-15 with a 2026-06-18 due date. LiteSpeed says v2.4.8, bundled with WHM Plugin v5.3.2.1, fixes a symlink-following flaw that can let a user with FTP or web shell access escalate to root on shared hosting servers running CloudLinux/CageFS.

#litespeed #cpanel #cisa-kev #shared-hosting #hosting #privilege-escalation #zero-day

2026-06-15
critical 4 sources
cPanel & WHM CVE-2026-41940: KEV Authentication Bypass in Hosting Control Planes
CISA added WebPros cPanel & WHM and WP2 CVE-2026-41940 to KEV on 2026-04-30 and marks ransomware use as known. WebPros patched many cPanel branches and WP2 136.1.7, provided session-file IOC checks, and urged immediate update or service exposure reduction.

#cpanel #cisa-kev #zero-day #hosting #ransomware

2026-06-01
critical 5 sources
LiteSpeed cPanel Plugin CVE-2026-48172: Root Privilege Escalation
CISA added LiteSpeed User-End cPanel Plugin CVE-2026-48172 to KEV on 2026-05-26 with a 2026-05-29 due date. NVD and LiteSpeed now provide exact advisory links, affected version bounds, and the vendor log-check command for redisAble exploitation.

#litespeed #cpanel #zero-day #privilege-escalation #cisa-kev

2026-05-27