CyberSec.Space Logo
CVEブラウザに戻る

CVE-2026-54420

🔥 Known Exploited (CISA KEV)HIGH
8.5
CVSS Severity Score
EPSS Score27.0650%
EPSS Percentile86.86th
Published2026-06-14
Last Modified2026-06-16
Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provided by a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS, as exploited in the wild in May 2026.

Affected Platforms (CPE)

No CPE configurations currently published for this record.

References & Advisories

🔗 https://blog.litespeedtech.com/2026/06/01/security-update-for-litespeed-cpanel-plugin-2/
🔗 https://www.litespeedtech.com/products/litespeed-web-server/control-panel-support/cpanel
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-54420

関連する脆弱性情報

CVE-2026-674394.3

OliveTin gives safe and simple access to predefined shell commands from a web interface. Prior to 3000.17.0, the service/internal/...

CVE-2026-674386.6

OliveTin gives access to predefined shell commands from a web interface. From 3000.2.0 until 3000.17.0, the service/internal/execu...

CVE-2026-674377.5

OliveTin gives access to predefined shell commands from a web interface. From 3000.0.0 until 3000.17.0, the service/internal/auth/...

CVE-2026-659756.5

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. In versions 1.88.0 up to but n...