CISA Warns of Another cPanel Plugin Flaw Exploited in Attacks
5 Articles
5 Articles
CISA warns of another cPanel plugin flaw exploited in attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has given U.S. government agencies three days to secure their servers against an actively exploited vulnerability (CVE-2026-54420) in the LiteSpeed cPanel user-end plugin.
The U.S. security agency CISA requests authorities to close an actively exploited root vulnerability in the LiteSpeed cPanel plugin within three days. The U.S. security authority CISA has set a three-day deadline to secure its servers against an actively exploited security vulnerability. The user-side cPanel plugin of LiteSpeed is affected in all versions prior to 2.4.8. The vulnerability under the CVE-2026-54420 identifier allows attackers with…
LiteSpeed cPanel Plugin 0-Day Vulnerability Actively Exploited in the Wild
A critical zero-day vulnerability in the LiteSpeed cPanel user-end plugin is being actively exploited in the wild, posing a serious threat to shared hosting environments worldwide. The flaw, tracked as CVE-2026-54420, enables privilege escalation to root level, allowing attackers to take full control of affected servers under specific conditions. LiteSpeed cPanel Plugin Zero-Day Vulnerability According to LiteSpeed Technologies, the vulnerabilit…
Coverage Details
Bias Distribution
- 100% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
