74 matches found
litespeed-cpanel-cve-2026-54420-fix
CVE-2026-54420 완화 툴킷 CVE-2026-54420 에 대한 방어적 수정, 감사 및 검증 툴킷으로, CloudLinux / CageFS 를 사용하는 공유 호스팅 환경에서 LiteSpeed cPanel 플러그인 에 영향을 미칩니다. ⚠️ 보안 공지 이 저장소는 시스템 관리자, 호스팅 제공자, 방어적 보안 연구 만을 대상으로 합니다. 익스플로잇 코드, 공격 도구 또는 무기화된 개념 증명은 포함되어 있지 않습니다. CVE-2026-54420 정보 CVE-2026-54420는 LiteSpeed cPanel 플러그인 / WH...
litespeed-cpanel-cve-2026-54420-fix
CVE-2026-54420 Mitigation Toolkit Defensive remediation, auditing, and verification toolkit for CVE-2026-54420 affecting LiteSpeed cPanel Plugin in shared hosting environments using CloudLinux / CageFS. ⚠️ Security Notice This repository is intended for system administrators, hosting providers, an...
CVE-2026-54420-LiteSpeed-Symlink-Exploit
CVE-2026-54420 - LiteSpeed cPanel 플러그인 심볼릭 링크 권한 상승 ⚠️ 경고 이 코드는 교육 목적 및 승인된 보안 테스트용으로만 제공됩니다. 명시적 허가 없이 시스템에 무단 사용하는 것은 불법입니다. 📋 설명 CVE-2026-54420은 LiteSpeed cPanel 플러그인버전 2.4.8 및 WHM 플러그인버전 5.3.2.0의 심볼릭 링크를 통한 권한 상승 취약점입니다. CloudLinux/CageFS가 포함된 공유 호스팅 서버에서 FTP 또는 웹 셸 접근 권한이 있는 사용자는 악의적인 심볼릭 링크를...
Exploit for UNIX Symbolic Link Following in Litespeedtech Litespeed_Cpanel_Plugin
CVE-2026-54420 - LiteSpeed cPanel Plugin Symlink Privilege Esc...
Exploit for UNIX Symbolic Link Following in Litespeedtech Litespeed_Cpanel_Plugin
CVE-2026-54420 Mitigation Toolkit !Licensehttps://img.shie...
CISA Flags LiteSpeed cPanel Plugin Flaw Exploited for Root Privilege Escalation
The U.S. Cybersecurity and Infrastructure Security Agency CISA has added a security flaw impacting LiteSpeed cPanel Plugin to its Known Exploited Vulnerabilities KEV catalog, requiring Federal Civilian Executive Branch FCEB agencies to apply the fixes by June 18, 2026. The vulnerability in questi...
LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability
LiteSpeed cPanel plugin contains a UNIX symbolic link Symlink following vulnerability that could allow a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS...
CVE-2026-54420
LiteSpeed cPanel plugin before 2.4.8 as distributed in LiteSpeed WHM PlugIn before 5.3.2.0 mishandles symlinks provided by a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS, as exploited in the wild in May 2026...
CVE-2026-54420
LiteSpeed cPanel plugin before 2.4.8 as distributed in LiteSpeed WHM PlugIn before 5.3.2.0 mishandles symlinks provided by a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS, as exploited in the wild in May 2026...
CVE-2026-54420
CVE-2026-54420 is a symlink-following vulnerability in LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM Plugin before 5.3.2.0). A user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS can abuse improperly validated symbolic links to access or ...
EUVD-2026-36657
LiteSpeed cPanel plugin before 2.4.8 as distributed in LiteSpeed WHM PlugIn before 5.3.2.0 mishandles symlinks provided by a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS, as exploited in the wild in May 2026...
CVE-2026-54420: UNIX Symbolic Link (Symlink) Following
LiteSpeed cPanel plugin before 2.4.8 as distributed in LiteSpeed WHM PlugIn before 5.3.2.0 mishandles symlinks provided by a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS, as exploited in the wild in May 2026...
PT-2026-49104
Name of the Vulnerable Software and Affected Versions LiteSpeed cPanel plugin versions prior to 2.4.8 LiteSpeed WHM PlugIn versions prior to 5.3.2.0 Description A privilege escalation issue exists where the software mishandles symbolic links symlinks provided by a user with FTP or web shell acces...
VulnCheck KEV: CVE-2026-54420
LiteSpeed cPanel plugin contains a UNIX symbolic link Symlink following vulnerability that could allow a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS...
CLSA-2025-1751297888 Update of shim-signed
Make this package installable on a system having an either Cloudlinux or RHEL7 signed kernel - SBAT variables are used now...
PT-2026-38673
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 11.136.0.9 cPanel versions prior to 11.136.1.10 WP Squared cPanel versions prior to 11.134.0.25 cPanel versions prior to 11.132.0.31 cPanel versions prior to 11.130.0.22 cPanel versions prior to 11.126.0.58 cPanel...
CLSA-2026-1777470383 less: Fix of 2 CVEs
Extend ELS coverage to rhel7els, oraclelinux7els and cloudlinux7els. - CVE-2022-48624 and CVE-2024-32487 were already fixed in 458-10.tuxcare.els1; this release reships those fixes to the additional platforms...
CVE-2025-65530
An eval injection in the malware de-obfuscation routines of CloudLinux ai-bolit before v32.7.4 allows attackers to overwrite arbitrary files as root via scanning a crafted file...