CVE-2026-54420: LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink)

LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability. LiteSpeed cPanel plugin contains a UNIX symbolic link (Symlink) following vulnerability that could allow a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS.

• CISA KEV-listed (remediation due 2026-06-18)
• EPSS 1.4% (70.7% percentile)
• CVSS 8.5 high

Related briefings

• CISA warns of two actively exploited Cisco and cPanel bugs 2026-06-16

Browse the CVE database

Read the full analysis on IntelFusions