CVE-2026-54420 | LiteSpeed cPanel Plugin up to 2.4.7 symlink

June 14, 2026 Yanac

A vulnerability described as critical has been identified in LiteSpeed cPanel Plugin up to 2.4.7. This impacts an unknown function. The manipulation results in symlink following.

This vulnerability is known as CVE-2026-54420. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More