cPanel Plugin vulnerabilities

2 known vulnerabilities in cPanel Plugin from LiteSpeed Technologies. 2 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.5 High severity

  LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Exploited

  CVE-2026-54420Jun 14, 2026LiteSpeed TechnologiesEPSS 1.44%

  LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provided by a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS, as exploited in the wild in May 2026.

• 9.8 Critical severity

  LiteSpeed cPanel Plugin Privilege Escalation Exploited

  CVE-2026-48172May 21, 2026LiteSpeed TechnologiesEPSS 17.9%

  LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild in May 2026. Detection is best done via a command line of grep -rE "cpanel_jsonapi_func=redisAble" /var/cpanel/logs /usr/local/cpanel/logs/ 2