THREATOPS

THREAT OPS › Threat News › [CISA KEV] CVE-2026-54420 — LiteSpeed cPanel Plugin: LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability

[CISA KEV] CVE-2026-54420 — LiteSpeed cPanel Plugin: LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability

medcisa_kevPublished 2026-06-15

CVE: CVE-2026-54420 Vendor: LiteSpeed Product: cPanel Plugin Vulnerability: LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability Date Added: 2026-06-15 Required Action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requir

MITRE ATT&CK techniques

Cloud ServicesT1021.007

Indicators of compromise

CVE-2026-54420cve
https://blog.litespeedtech.com/2026/06/01/security-update-for-litespeed-cpanel-plugin-2/url

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-54420