LiteSpeed Technologies cPanel Plugin

• CVE-2026-54420 High 8.5 Exploited LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provided by a user with FTP or web shell access on a shared hosting server running Clou 1.4%
• CVE-2026-48172 Critical 10.0 Exploited LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild in May 2026. Detection is best done via a command line of grep -rE "cpanel_jsonap 17.9%