LiteSpeed Technologies vulnerabilities
19 published CVEs name LiteSpeed Technologies among the affected products; CISA lists 2 of them as exploited in the wild.
- 19Published CVEs19 of them scored
- 6Last 12 monthspublished in the last year
- 3Critical10 more rated high
- 2Known exploitedin CISA's KEV catalog
Known exploited
Newest addition to KEV first.
- CVE-2026-54420
LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provided by a user with FTP or web shell…
LiteSpeed Technologies · cPanel Plugin
ExploitedHigh8.5 - CVE-2026-48172
LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild in May 2026. Detection is best done via…
LiteSpeed Technologies · cPanel Plugin
ExploitedCritical10.0