Brand
LiteSpeed: actively exploited vulnerabilities
2 vulnerabilities in LiteSpeed products (cPanel Plugin) are in CISA’s catalog of exploited vulnerabilities. Last added: June 15, 2026.
-
2 vulnerabilities added in the last 12 months
-
2 exploited vulnerabilities in the catalog, in total
-
0 added in the last 30 days
By category
Add just one LiteSpeed category to your radar, or open its page.
- Web and application servers 2 vulnerabilities
A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.
Affected products
- cPanel Plugin2 vulnerabilities, Web servers
Name used by CISA: LiteSpeed. Product families: indicative classification by this site.
Patch first
In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this LiteSpeed list.
- Rank 1
LiteSpeed cPanel PluginCVE-2026-48172
LiteSpeed cPanel Plugin Privilege Escalation Vulnerability
CVSS severity 9.8critical
Added May 26, 2026
- Rank 2
LiteSpeed cPanel PluginCVE-2026-54420
LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability
CVSS severity 8.5high
Added Jun 15, 2026
Follow and verify
Indicative classification, based on the vendor and product names given by CISA. How products are classified.