SecurityThe Hacker Newsabout 3 hours ago
CISA Flags LiteSpeed cPanel Plugin Flaw for Root Escalation
1 min read
CISA added CVE-2026-54420 (CVSS 8.5) to its KEV catalog, requiring FCEB agencies to patch by June 18, 2026. The flaw allows FTP or web shell users to escalate privileges to root on shared hosting servers running CloudLinux or CageFS. LiteSpeed urged upgrades to WHM Plugin v5.3.2.1 or higher.
Level
Hype check
Tap to vote and see what everyone thinks.
