#LiteSpeed
All CosmicBytez Labs articles tagged #LiteSpeed, across news, security advisories, how-to guides, and projects.
- News
LiteSpeed Enterprise Flaw Lets One Hosting Account Seize Root on Shared Servers
A LiteSpeed Web Server Enterprise flaw before v6.3.7 bypasses CageFS isolation, letting one low-privilege hosting account gain root on shared servers.
- News
CISA Warns of Another Actively Exploited cPanel Plugin Flaw
CISA has added CVE-2026-54420, an actively exploited vulnerability in the LiteSpeed cPanel user-end plugin, to its Known Exploited Vulnerabilities catalog...
- Security
CVE-2026-54420: LiteSpeed cPanel Plugin Symlink Escape on Shared Hosting
A high-severity symlink vulnerability in the LiteSpeed cPanel plugin (CVSS 8.5) allows users with FTP or web shell access to escape CloudLinux/CageFS...
- News
CISA Gives Feds 4 Days to Patch Actively Exploited cPanel Plugin Flaw
CISA's emergency directive gives federal agencies four days to patch the actively exploited LiteSpeed cPanel plugin flaw being weaponized in the wild.
- News
CISA Urges Immediate Patching of Exploited LiteSpeed cPanel
CISA has added a LiteSpeed cPanel plugin zero-day to its Known Exploited Vulnerabilities catalog after active exploitation allowed attackers to execute scripts.
- News
LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run
A maximum-severity vulnerability in the LiteSpeed User-End cPanel Plugin, tracked as CVE-2026-48172 with a CVSS score of 10.0, is under active...