Real-Time Threat Intelligence & CVE Tracker

LiteSpeed cPanel plugin contains a UNIX symbolic link (Symlink) following vulnerability that could allow a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS.

Vendor: LiteSpeed Fix: Vendor Patch / Mitigation Available

Analyze Advisory

Vulnerability Severity Distribution

3 total

Top Targeted Vendors & Stacks

Ranked

#1 Microsoft 18 #2 Hcltech 13 #3 Cisco 10 #4 Linux 3 #5 Fortinet 3 #6 Langflow 3 #7 Oracle 3 #8 SimpleHelp 3

Common Attack Vectors (Top CWEs)

CWE-89 SQL Injection (SQLi) CWE-79 Cross-Site Scripting (XSS) CWE-862 Missing Authorization CWE-94 Code Injection (RCE) CWE-287 Improper Authentication CWE-22 Path Traversal

Latest Security Vulnerabilities

Explore Feed

CVE-2026-54420 CRITICAL 9.8 Fix: Vendor Patch / Mitigation Available 3 months ago

LiteSpeed cPanel Plugin Vulnerability

LiteSpeed cPanel plugin contains a UNIX symbolic link (Symlink) following vulnerability that could allow a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS.

Vendor: LiteSpeed Product: cPanel Plugin View Details

CVE-2026-48172 CRITICAL 9.8 Fix: Vendor Patch / Mitigation Available 4 months ago

LiteSpeed cPanel Plugin Vulnerability

LiteSpeed cPanel Plugin contains privilege escalation vulnerability that is exposed via the user-end cPanel plugin, which can be abused by any cPanel user account to execute arbitrary scripts with root privileges.

Vendor: LiteSpeed Product: cPanel Plugin View Details

CVE-2026-41940 CRITICAL 9.8 Fix: Vendor Patch / Mitigation Available 5 months ago

WebPros cPanel & WHM and WP2 (WordPress Squared) Vulnerability

WebPros cPanel & WHM (WebHost Manager) and WP2 (WordPress Squared) contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.

Vendor: WebPros Product: cPanel & WHM and WP2 (WordPress Squared) View Details