CISA Flags LiteSpeed cPanel Plugin Flaw Exploited for Root Privilege Escalation

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-06-16 05:41 UTC
  • Importiert: 2026-06-23 16:16 UTC
  • CVSS: 8.5
  • Quelle-ID: thn_global
  • uid_hash: 5dccd5647496ddad40c360d6657513ea1cb95ac13363d72b12db4df9ebe870c5

Inhalt

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a security flaw impacting LiteSpeed cPanel Plugin to its Known Exploited Vulnerabilities (KEV) catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to apply the fixes by June 18, 2026.

The vulnerability in question is CVE-2026-54420 (CVSS score: 8.5), which has been described as a case of privilege

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-54420

HIGH

8.5

HIGH

8.5

2026-06-14

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

security_news - de https://feeds.feedburner.com/TheHackersNews