79 matches found
litespeed-cpanel-cve-2026-54420-fix
CVE-2026-54420 缓解工具包 针对 CVE-2026-54420 的防御性修复、审计与验证工具包，该漏洞影响使用 CloudLinux / CageFS 的共享主机环境中的 LiteSpeed cPanel 插件 。 ⚠️ 安全声明 本仓库仅供系统管理员、主机服务商及防御性安全研究 使用。 不包含任何漏洞利用代码、攻击性工具或武器化概念验证。 关于 CVE-2026-54420 CVE-2026-54420 影响 LiteSpeed cPanel 插件 / WHM 插件 的特定版本，在共享主机环境中符号链接处理可能被滥用。 在存在漏洞的配置中，低权限用户（例如通过被入侵的 FT...
litespeed-cpanel-cve-2026-54420-fix
CVE-2026-54420 缓解工具包 面向 CVE-2026-54420 的防御性修复、审计和验证工具包，该漏洞影响使用 CloudLinux / CageFS 的共享主机环境中的 LiteSpeed cPanel 插件 。 ⚠️ 安全声明 本仓库仅面向系统管理员、托管服务提供商以及防御性安全研究人员 。 不包含任何利用代码、攻击性工具或武器化概念验证。 关于 CVE-2026-54420 CVE-2026-54420 影响某些版本的 LiteSpeed cPanel 插件 / WHM 插件 ，在共享主机环境中可能导致符号链接处理被滥用。 在易受攻击的配置下，低权限用户（例如通过受感染...
CVE-2026-54420-LiteSpeed-Symlink-Exploit
CVE-2026-54420 - LiteSpeed cPanel 插件符号链接权限提升 ⚠️ 警告 此代码仅用于教育目的和授权的安全测试。 未经明确许可对系统进行未授权使用是违法的。 📋 描述 CVE-2026-54420 是 LiteSpeed 用于 cPanel（版本 2.4.8）和 WHM（版本 5.3.2.0）的插件中的一个符号链接（symlink）权限提升 漏洞。在使用 CloudLinux/CageFS 的共享托管服务器上，拥有 FTP 或 web shell 访问权限的用户可以创建恶意符号链接，以读取其分配目录之外的文件，包括： /etc/passwd,...
Exploit for UNIX Symbolic Link Following in Litespeedtech Litespeed_Cpanel_Plugin
CVE-2026-54420 - LiteSpeed cPanel Plugin Symlink Privilege Esc...
Exploit for UNIX Symbolic Link Following in Litespeedtech Litespeed_Cpanel_Plugin
CVE-2026-54420 Mitigation Toolkit !Licensehttps://img.shie...
CISA Flags LiteSpeed cPanel Plugin Flaw Exploited for Root Privilege Escalation
The U.S. Cybersecurity and Infrastructure Security Agency CISA has added a security flaw impacting LiteSpeed cPanel Plugin to its Known Exploited Vulnerabilities KEV catalog, requiring Federal Civilian Executive Branch FCEB agencies to apply the fixes by June 18, 2026. The vulnerability in questi...
LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability
LiteSpeed cPanel plugin contains a UNIX symbolic link Symlink following vulnerability that could allow a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS...
CVE-2026-54420
LiteSpeed cPanel plugin before 2.4.8 as distributed in LiteSpeed WHM PlugIn before 5.3.2.0 mishandles symlinks provided by a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS, as exploited in the wild in May 2026...
EUVD-2026-36657
LiteSpeed cPanel plugin before 2.4.8 as distributed in LiteSpeed WHM PlugIn before 5.3.2.0 mishandles symlinks provided by a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS, as exploited in the wild in May 2026...
CVE-2026-54420
LiteSpeed cPanel plugin before 2.4.8 as distributed in LiteSpeed WHM PlugIn before 5.3.2.0 mishandles symlinks provided by a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS, as exploited in the wild in May 2026...
CVE-2026-54420
CVE-2026-54420 is a symlink-following vulnerability in LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM Plugin before 5.3.2.0). A user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS can abuse improperly validated symbolic links to access or ...
CVE-2026-54420: UNIX Symbolic Link (Symlink) Following
LiteSpeed cPanel plugin before 2.4.8 as distributed in LiteSpeed WHM PlugIn before 5.3.2.0 mishandles symlinks provided by a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS, as exploited in the wild in May 2026...
PT-2026-49104
Name of the Vulnerable Software and Affected Versions LiteSpeed cPanel plugin versions prior to 2.4.8 LiteSpeed WHM PlugIn versions prior to 5.3.2.0 Description A privilege escalation issue exists where the software mishandles symbolic links symlinks provided by a user with FTP or web shell acces...
VulnCheck KEV: CVE-2026-54420
LiteSpeed cPanel plugin contains a UNIX symbolic link Symlink following vulnerability that could allow a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS...
CLSA-2025-1751297888 Update of shim-signed
Make this package installable on a system having an either Cloudlinux or RHEL7 signed kernel - SBAT variables are used now...
PT-2026-45284
Make this package installable on a system having an either Cloudlinux or RHEL7 signed kernel - SBAT variables are used now...
PT-2026-38673
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 11.136.0.9 cPanel versions prior to 11.136.1.10 WP Squared cPanel versions prior to 11.134.0.25 cPanel versions prior to 11.132.0.31 cPanel versions prior to 11.130.0.22 cPanel versions prior to 11.126.0.58 cPanel...
CLSA-2026-1777470383 less: Fix of 2 CVEs
Extend ELS coverage to rhel7els, oraclelinux7els and cloudlinux7els. - CVE-2022-48624 and CVE-2024-32487 were already fixed in 458-10.tuxcare.els1; this release reships those fixes to the additional platforms...
