Brand
LiteSpeed: actively exploited vulnerabilities
2 vulnerabilities in LiteSpeed products (cPanel Plugin) are in CISA’s catalog of exploited vulnerabilities. Last added: June 15, 2026.
-
2 vulnerabilities added in the last 12 months
-
2 exploited vulnerabilities in the catalog, in total
-
0 added in the last 30 days
By category
Add just one LiteSpeed category to your radar, or open its page.
- Web and application servers 2 vulnerabilities
A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.
Affected products
- cPanel Plugin 2 vulnerabilities · Web servers
Name used by CISA: LiteSpeed. Product families: indicative classification by this site.
Patch first
In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this LiteSpeed list.
Rank 1LiteSpeed cPanel Plugin
CVE-2026-48172LiteSpeed cPanel Plugin Privilege Escalation Vulnerability
Added in the last 12 months: ranked by severity.
- Added
- May 26, 2026
- CISA deadline
- 3 days
- CVSS severity
- 9.8 (critical)
Rank 2LiteSpeed cPanel Plugin
CVE-2026-54420LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability
Added in the last 12 months: ranked by severity.
- Added
- Jun 15, 2026
- CISA deadline
- 3 days
- CVSS severity
- 8.5 (high)
Follow and verify
Indicative classification, based on the vendor and product names given by CISA. How products are classified.